Package: sork-vacation
Severity: important
Tags: security
A cross-site-scripting vulnerability has been found in sork-vacation
that permits injection of web script when setting the parent frame's
title. Release 2.2.2 addresses this problem.
Cheers,
Moritz
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
