new version of phplist fix XSS vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

new version of phplist fix XSS vulnerability

Subject: new version of phplist fix XSS vulnerability
Date: 12 Oct 2006 00:45:42 -0000
From: suppressed

phplist, http://www.phplist.com is a popular open source newsletter application written in PHP.

An XSS vulnerability has been found, in the public pages of the application.
This issue has been addressed in the latest release 2.10.3, available from www.phplist.com

Versions affected: any version up to 2.10.2

Credits: MustLive, Administrator of Websecurity web site, http://websecurity.com.ua 
discovered the vulnerability and contacted the vendor 

more information at http://websecurity.com.ua/267/

This release also includes the documented fixes for the local file 
include vulnerability http://www.securityfocus.com/bid/17429

Michiel Dethmers

Prev by Date: iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability
Next by Date: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability
Previous by thread: iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability
Next by thread: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.