Published:2006/12/25  Last Updated:2008/05/21

JVN#02729869
pnamazu cross-site scripting vulnerability

Overview

pnamazu, the Perl version program of the full-text search engine Namazu, contains a cross-site scripting vulnerability.

Products Affected

  • pnamazu-2006.02.28 and earlier
For more information, refer to the developer's website.

Description

Impact

An arbitrary script may be executed on the user's web browser.

Solution

Vendor Status

Vendor Status Last Update Vendor Notes
pnamazu developer Vulnerable 2006/12/25

References

JPCERT/CC Addendum

Credit

Daiki Fukumori of Secure Sky Technology, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE
JVN iPedia JVNDB-2006-000851

Update History