Great Reviews!Need help setting up your website, installing Apache, PHP, MySQL, or PhpNuke?Need help customizing or designing scripts?Please contact me via the Contact Us option for further details and pricing.
SOFTWARE: Wizz RSS News Reader (Extension for Mozilla Firefox) 2.x - http://secunia.com/product/13955/
DESCRIPTION: A vulnerability has been reported in the Wizz RSS News Reader extension for Mozilla Firefox, which can be exploited by malicious people to compromise a vulnerable system.
Certain input is not properly sanitised before being used and can be exploited to e.g. execute arbitrary script code within the "chrome:" context. Successful exploitation requires that a user is tricked into loading a specially crafted RSS feed. The vulnerability is reported in versions prior to 2.1.9.
SOLUTION: Update to version 2.1.9. - https://addons.mozilla.org/en-US/firefox/addon/424
PROVIDED AND/OR DISCOVERED BY: The vendor credits Jefferson Ogata, NOAA Computer Incident Response Team.
ORIGINAL ADVISORY: Wizz RSS News Reader: - https://addons.mozilla.org/en-US/firefox/addon/424
OTHER REFERENCES: US-CERT VU#319464: http://www.kb.cert.org/vuls/id/319464
Posted on Wednesday, April 18, 2007 @ 00:33:43 EDT by raven
![[Valid RSS]](http://ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
:: 
::
