PowerStore™ 3 XSS vuln.
Page 1 of 1
PowerStore™ 3 XSS vuln.
##############################################
Date: 09 September 2010
vendor:http://www.webassist.com/php-scripts-and-solutions/powerstore/
affected versions:PowerStore™ 3 and other
versions also can be affected.
###############################################
PowerStore™ 3 contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "totalRows_WADAProducts" parameter in "Products_Results.php" isn't properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
##############################################
Solution:
Filter malicious characters and character sequences in a web proxy.
###############################################
Date: 09 September 2010
vendor:http://www.webassist.com/php-scripts-and-solutions/powerstore/
affected versions:PowerStore™ 3 and other
versions also can be affected.
###############################################
PowerStore™ 3 contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "totalRows_WADAProducts" parameter in "Products_Results.php" isn't properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
##############################################
Solution:
Filter malicious characters and character sequences in a web proxy.
###############################################
andry- Moderator
- Posts : 467
Join date : 2010-05-07
Page 1 of 1
Permissions in this forum:
You cannot reply to topics in this forum
|
|