正文

David Czarnecki Blojsom 多个跨站脚本攻击漏洞

admin
admin V管理员 /0 评论 /5 阅读
0103
此篇文章发布距今已超过1280天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

David Czarnecki Blojsom 多个跨站脚本攻击漏洞

  • CNNVD编号：CNNVD-200609-266
    • <!--
  • 危害等级： 中危-->
  • 危害等级： 中危
  • CVE编号： CVE-2006-4829
  • 漏洞类型： 跨站脚本
  • 发布时间： 2006-09-15
  • 威胁类型： 远程
  • 更新时间： 2006-09-19
  • 厂        商： blojsom
  • 漏洞来源： Avinash Shenoi of ...

漏洞简介

David Czarnecki Blojsom 2.31中存在多个跨站脚本攻击(XSS)漏洞，远程攻击者可以通过博客帖子中的(1) blog-category-description、(2) blog-entry-title、(3) rss-enclosure-url、(4) technorati-tagsi或(5) blog-category-name参数注入任意Web脚本或HTML。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Apple Mac OS X Server 10.4

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.1

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.2

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.3

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.4

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.5

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.6

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.6

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.7

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.7

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.8

Apple Mac OS X v10.4.9

http://www.apple.com/support/downloads/

参考网址

来源: US-CERT

名称: VU#425861

链接:http://www.kb.cert.org/vuls/id/425861

来源: US-CERT

名称: TA07-072A

链接:http://www.us-cert.gov/cas/techalerts/TA07-072A.html

来源: BID

名称: 20026

链接:http://www.securityfocus.com/bid/20026

来源: XF

名称: blojsom-formfields-xss(28951)

链接:http://xforce.iss.net/xforce/xfdb/28951

来源: VUPEN

名称: ADV-2007-0930

链接:http://www.frsirt.com/english/advisories/2007/0930

来源: VUPEN

名称: ADV-2006-3633

链接:http://www.frsirt.com/english/advisories/2006/3633

来源: SREASON

名称: 1594

链接:http://securityreason.com/securityalert/1594

来源: SECUNIA

名称: 24479

链接:http://secunia.com/advisories/24479

来源: SECUNIA

名称: 21935

链接:http://secunia.com/advisories/21935

来源: APPLE

名称: APPLE-SA-2007-03-13

链接:http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

来源: docs.info.apple.com

链接:http://docs.info.apple.com/article.html?artnum=305214

来源: BUGTRAQ

名称: 20060914 XSS vulnerability in Blojsom; Tool Signature

链接:http://www.securityfocus.com/archive/1/archive/1/446009/100/0/threaded

受影响实体

  • Blojsom Blojsom:2.31  
    <!--
    2000-1-1
    -->

补丁

    暂无