lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20060221005220.22287.qmail@securityfocus.com>
Date: 21 Feb 2006 00:52:20 -0000
From: addmimistrator@...il.com
To: bugtraq@...urityfocus.com
Subject: [myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS
 Attack


Hello Everybody
——–Summary——–
Software: CuteNews
Sowtware’s Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
——-Description——-
There is a security bug in CuteNews version 1.4.1 that allows malicious people to perform an XSS attack

Full Advisory:
http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
greatz to roozbeh afrasiabi:black_death


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ