Secure testing team - Dec 2009 - Bug#562633: CVE-2009-4422: Multiple cross-site scripting (XSS) vulnerabilities

Package: libphp-jpgraph
Severity: serious
Tags: security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for libphp-jpgraph.

CVE-2009-4422[0]:
| Multiple cross-site scripting (XSS) vulnerabilities in the
| GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph
| 3.0.6 allow remote attackers to inject arbitrary web script or HTML
| via a key to csim_in_html_ex1.php, and other unspecified vectors.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4422
    http://security-tracker.debian.org/tracker/CVE-2009-4422


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAks2SHAACgkQNxpp46476ao7WQCgjk/ul1XHq1gXSsLKKMLE+hFH
9EsAoIuLL9H4Q3ZBAA2r7lgKDpPHeptl
=6VKD
-----END PGP SIGNATURE-----