Bugtraq mailing list archives
Re: Blue Coat xss
From: Tom Kelly <tom.kelly () bluecoat com>
Date: Thu, 02 Oct 2008 15:56:59 -0400
After getting more details from the original poster, Blue Coat Systems has issued an advisory for this issue: http://www.bluecoat.com/support/securityadvisories/icap_patience Tom Kelly tom.kelly () bluecoat com jplopezy () gmail com wrote:
There is a security issue in the blue coat. The problem lies in the "Web Filter", which lets you execute an XSS. This only affects the Internet Explorer browser. " as a result, could jump the antivirus scan or make spoofing. POC http://www.example.com/file.exe?<script>(1)</script> Juan Pablo Lopez Yacubian
Current thread:
- Re: Blue Coat xss Tom Kelly (Oct 02)