 |
|
|
|
TITLE:
tlen URL Script Insertion Vulnerability
SECUNIA ADVISORY ID:
SA13605
VERIFY ADVISORY:
http://secunia.com/advisories/13605/
CRITICAL:
Less critical
IMPACT:
Cross Site Scripting
WHERE:
>From remote
SOFTWARE:
tlen 5.x
http://secunia.com/product/4442/
DESCRIPTION:
A vulnerability has been reported in tlen, allowing malicious people
to inject arbitrary script code.
The problem is that script code can be embedded in URLs. The code
will be executed in context of the message containing the URL.
Versions prior to 5.23.4.2 have been reported vulnerable.
SOLUTION:
The vulnerability has been fixed in version 5.23.4.2.
PROVIDED AND/OR DISCOVERED BY:
Blazej Miga and Jaroslaw Sajko
ORIGINAL ADVISORY:
http://www.man.poznan.pl/security/tlen.html
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
|
|
|
|
|
|
|
|
