jetlib.sec » Full Disclosure » Dolphin 7.0.7

Feeds

133122 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 21, 2012
• 

  Dolphin 7.0.7

  Posted: February 21st, 2012, 5:47am PST

  Tags:   

  Posted by YGN Ethical Hacker Group on Feb 21

  1. OVERVIEW
  
  Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting.
  
  2. BACKGROUND
  
  Dolphin is the only "all-in-one" free community software platform for
  creating your own social networking, community or online dating site
  without any limits and under your full control. Dolphin comes with
  hundreds of features, module plugins and tools. Everything is included
  and extension posibilities are literally endless. You can use...