Информационная безопасность
[RU] switch to
English Version



Дополнительная информация

  Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )

  Bosdev Multiple vulnerabilities

  [Vulz]  PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar

  Aria-Security.Net [Web based alpha tabbed address book SQL Injection]

  Aleris Software Systems Web Publisher Calendar SQL injection

From:morin.josh_(at)_gmail.com <morin.josh_(at)_gmail.com>
Date:24 октября 2007 г.
Subject:Novell OpenSUSE SWAMP multiple XSS

Vendor Site: http://en.opensuse.org/Swamp
Version affected: ???
Demo:http://swampdemo.suse.de/webswamp/swamp/template/Index.vm
Class: Input Validation Error

Overview:OpenSUSE Workflow Administration and Management Platform login page fails to sufficiently sanitize user-supplied input data via login box.

Example:
1.<script>alert('xss')</script>
2.<html><font color="Red"><b>XSS</b></font></html>
3.<EMBED SRC="http://site.com/xss.swf"

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород

 
 



Rating@Mail.ru
test server