what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

eFront Cross Site Scripting

Posted Jun 4, 2010

Authored by Mohammed Boumediane | Site vupen.com

VUPEN Web Vulnerability Research Team discovered multiple vulnerabilities in eFront. These issues are caused by input validation errors when processing the "remote_theme", "name", "system_email", "password_length", "math_server", "site_motto" and "site_name" parameters, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site. Versions prior to 3.6.3 build 7400 are affected.

tags | advisory, web, arbitrary, vulnerability, xss

SHA-256 | 1104801d6660f352341d2255e224ec704f33018e832b6a8a32964aa0a77e692e

Download | Favorite | View