Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1159
Reference (s):
- BID:75106
- URL: http://www.securityfocus.com/bid/75106
- CERT-VN:VU#810572
- URL: http://www.kb.cert.org/vuls/id/810572
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10702