CVE request: serendipity < 1.5.4 xss

[Hanno Böck <hanno () hboeck de>]

http://blog.s9y.org/archives/223-Serendipity-1.5.4-released.html

http://www.htbridge.ch/advisory/xss_vulnerability_in_serendipity.html

"as well as a XSS security issue discovered and reported by High-Tech Bridge. 
The XSS is only exploitable though, if you are using the "Remember me" feature 
in the Serendipity backend to login."



-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

http://schokokeks.org - professional webhosting

Attachment: signature.asc
Description: This is a digitally signed message part.