Description

Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.

Remediation

References

CVE-2009-1907

Related Vulnerabilities

CakePHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3712)

WordPress Plugin Testimonial WordPress-AP Custom Testimonial Unspecified Vulnerability (1.4.7)

WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.12)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15733)

WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Unspecified Vulnerability (3.3.8)

Severity

Medium

Classification

CVE-2009-1907 CWE-707

Tags

Missing Update Known Vulnerabilities