CVE-2015-8831

Published: Feb 9, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the author name in a comment.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/134353/dotclear-2.8.1-Cross-Site-Scripting.html

x_refsource_MISC

[oss-security] 20160306 Re: CVE Request: Dotclear: XSS vulnerability in comments managment page and media exclusion control enforcement

mailing-list

x_refsource_MLIST

https://blog.curesec.com/article/blog/dotclear-281-XSS-94.html

x_refsource_MISC

[oss-security] 20160305 CVE Request: Dotclear: XSS vulnerability in comments managment page and media exclusion control enforcement

mailing-list

x_refsource_MLIST

http://dotclear.org/blog/post/2015/10/25/Dotclear-2.8.2

x_refsource_CONFIRM

96377

vdb-entry

x_refsource_BID

https://hg.dotclear.org/dotclear/rev/65e65154dadf

x_refsource_CONFIRM

20151114 dotclear 2.8.1: XSS

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-8831

Description

Affected Products

References