CVE-2009-0934
18.03.2009, 02:00
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
| Vendor | Product | Version |
|---|---|---|
| process-one | ejabberd | 𝑥 ≤ 2.0.3 |
| process-one | ejabberd | 0.9 |
| process-one | ejabberd | 0.9.1 |
| process-one | ejabberd | 0.9.8 |
| process-one | ejabberd | 1.0.0 |
| process-one | ejabberd | 1.1.0 |
| process-one | ejabberd | 1.1.1 |
| process-one | ejabberd | 1.1.1.0 |
| process-one | ejabberd | 1.1.1.1 |
| process-one | ejabberd | 1.1.2 |
| process-one | ejabberd | 1.1.3 |
| process-one | ejabberd | 1.1.14 |
| process-one | ejabberd | 2.0.0 |
| process-one | ejabberd | 2.0.0:beta1 |
| process-one | ejabberd | 2.0.0:rc1 |
| process-one | ejabberd | 2.0.1_2:_2 |
| process-one | ejabberd | 2.0.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References