Bugtraq mailing list archives
Novell OpenSUSE SWAMP multiple XSS
From: morin.josh () gmail com
Date: 24 Oct 2007 00:02:01 -0000
Vendor Site: http://en.opensuse.org/Swamp Version affected: ??? Demo:http://swampdemo.suse.de/webswamp/swamp/template/Index.vm Class: Input Validation Error Overview:OpenSUSE Workflow Administration and Management Platform login page fails to sufficiently sanitize user-supplied input data via login box. Example: 1.<script>alert('xss')</script> 2.<html><font color="Red"><b>XSS</b></font></html> 3.<EMBED SRC="http://site.com/xss.swf"
Current thread:
- Novell OpenSUSE SWAMP multiple XSS morin . josh (Oct 24)
- <Possible follow-ups>
- Re: Novell OpenSUSE SWAMP multiple XSS test (Oct 26)