PDA

Bekijk Volledige Versie : Interspire ArticleLive 2005 (php version) is vulnerable to XSS



mircia mircia
23/03/05, 20:25
Can you please confirm my suggestion that:

Interspire ArticleLive 2005 (php version) is vulnerable to XSS:

e.g.

http://localhost/articles/newcomment?ArticleId="><script>alert('hi')</script>

// best wishes, mircia [mircia@security.talte.net]

eddie@interspire.com
24/08/05, 02:18
This has been patched.