• info
• discussion
• exploit
• solution
• references

SiteBar Command.PHP Cross-Site Scripting Vulnerability

Solution:
The vendor released SiteBar 3.3.9 to address this issue. Please see the references for more information.


SiteBar SiteBar 3.2.6

• Debian sitebar_3.2.6-7.1_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6-7 .1_all.deb


• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.2

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.3

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.4

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.5

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.6

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.7

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0

SiteBar SiteBar 3.3.8

• SiteBar SiteBar-3.3.9.tar.bz2
  http://downloads.sourceforge.net/sitebar/SiteBar-3.3.9.tar.bz2?modtime =1192322139&big_mirror=0