Nixpkgs security tracker

Untriaged

Permalink CVE-2013-7351

created 2 months ago

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow …

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile function; or (5) vectors related to bookmarks.

References

https://github.com/sebsauvage/Shaarli/commit/53da201749f8f362323ef278bf338f1d9f… x_transferredx_refsource_CONFIRM
https://github.com/sebsauvage/Shaarli/issues/134 x_transferredx_refsource_CONFIRM
http://seclists.org/oss-sec/2014/q2/1 x_transferredx_refsource_MISC
http://seclists.org/oss-sec/2014/q2/4 x_transferredx_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/92215 x_transferredx_refsource_MISC

Affected products

Shaarli

==before 53da201749f8f362323ef278bf338f1d9f7a925a

Matching in nixpkgs

pkgs.shaarli

Personal, minimalist, super-fast, database free, bookmarking service

nixos-unstable 0.16.1
- nixpkgs-unstable 0.16.1
- nixos-unstable-small 0.16.1
nixos-25.11 0.15.0
- nixos-25.11-small 0.15.0
- nixpkgs-25.11-darwin 0.15.0

Package maintainers

@schneefux schneefux <schneefux+nixos_pkg@schneefux.xyz>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.shaarli

Package maintainers