bugtraq - Re: PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 26 Jul 2005 09:37:32 -0000
From: stuartc1@...urityfocus.com, hotmail@...urityfocus.com (at),
	com@...urityfocus.com (dot)
To: bugtraq@...urityfocus.com
Subject: Re: PHP Code Snippet Library Multiple Cross-Site Scripting (XSS)
 Vulnerabilities

Hi,

This is a bugus bug report, I've tested this on both v0.8 and v0.9 and no problems.

Please remove this bug as it gives a bad name to the project.

It is possible to pass fake variables (as with most systems), but not executable code!! which is not a security issue.

If I'm missing something, please email me with details info. But as far as I can see this is a bugus report.

Stuart