(pseudo)Persistent Cross-Site Scripting (XSS) at anbudstorget.no

Skrevet av xqus, 11 April, 2010 - 17:13

anbudstorget.no is vulnerable to a Persistent Cross-Site Scripting attack.
The problem exists because of the lack of properly escaping user
input before using it to specify the site background.

Hele sårbarheten kan leses her: http://lsec.no/vuln/2010-05

Tags: 
xss
sårbarheter
Kopirett © 2008-2011 Audun Larsen.
Noen rettigheter reservert.
Blogglisten
RSS
Drupal theme by Kiwi Themes.