Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included)
May 17 2007 08:45PM
john martinelli com
note to editors: this patch resolves this vulnerability: http://redlevel.org/wp-content/uploads/patch.zip
<!--
Redoable 1.2 - Cross-Site Scripting Vulnerability
---------------
Vulnerable Code
---------------
header.php (line 6):
... elseif (is_search()) { ?> Search for <?php echo $s } ...
sear...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
<!--
Redoable 1.2 - Cross-Site Scripting Vulnerability
---------------
Vulnerable Code
---------------
header.php (line 6):
... elseif (is_search()) { ?> Search for <?php echo $s } ...
sear...
[ more ]