CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

Bugtraq ID: 50847
Class: Design Error
CVE: CVE-2011-4025
Remote: Yes
Local: No
Published: Nov 29 2011 12:00AM
Updated: Nov 29 2011 12:00AM
Credit: Marian Ventuneac
Vulnerable: EllisLab ExpressionEngine 2.2.2
EllisLab CodeIgniter 2.0.3
Not Vulnerable: EllisLab ExpressionEngine 2.3.1
EllisLab CodeIgniter 2.1


 

Privacy Statement
Copyright 2010, SecurityFocus