• info
• discussion
• exploit
• solution
• references

PyBlosxom Atom Flavor Multiple XML Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URI string, which can be inserted, is available:

http://host/path/%3Ccool%3E?flav=atom