VWE-2009-0046 Printable Version

https://www.vaultwiki.org/pages/Book/Documentation/VWE-2009-0046
This page is a chapter in Info Known Vulnerabilities

This page has been seen 177,857 times.

    • Created by
      on
      Last updated by
      on
Common NamePM Hijack Vulnerability
VWE-IDVWE-2009-0046
Related ReportNone
SeverityHIGH
Exploit DifficultyNORMAL
PlatformAffects all platforms supported by the vulnerable versions.
DescriptionHTML/Javascript injection.
DiscoveredMay 6, 2009
ResolvedMay 10, 2009
Patches Available2.3.0
WorkaroundUpdate permissions so that untrusted users cannot send private messages.
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.