jetlib.sec » Bugtraq » 0-DAY XSS of cforms II is now fixed after a year and four months (was Re: cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977)

Feeds

132968 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• February 17, 2012
• 

  0-DAY XSS of cforms II is now fixed after a year and four months (was Re: cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977)

  Posted: February 17th, 2012, 8:36am PST

  Tags:   

  Posted by Kousuke Ebihara on Feb 17

  I've reported the following XSS vulnerability in cforms II. This vulnerability has been fixed on February 14, 2012 by
  its developer.
  
  WordPress cformsII Plugin "rs" Cross-Site Scripting Vulnerability - Secunia.com
  http://secunia.com/advisories/47984/
  
  You might see this is a normal XSS vulnerability, but this isn't.
  
  Because EXPLOIT CODE IS PUBLISHED AS 0-DAY ON Oct 30, 2010 in this list!
  
  Are you puzzled?
  
  Actually, the...