Re: EasyCMS vulnerable to XSS injection.
- From: kim@xxxxxxxxxx
- Date: 31 Jan 2006 16:14:48 -0000
Kind of you to notice, our system will during the next week be patched for XSS flaws in the different input fields which might be of concern for XSS. The rest of the system will also be checked to reensure that all user-input is processed securely.
We take this matter seriusly, and would like to inform that you are referring to the input fields of the contact form - which outputs a reciept with the given data which was not checked for XSS, since we don't use cookies in Easy CMS.
I will update this post when we have more news on this upcomming security update.
regards,
Kim Steinhaug
Easy CMS developer
- Prev by Date: Re: Re: Winamp 5.12 - 0day exploit - code execution through playlist
- Next by Date: Proof of concept for CommuniGate Pro Server vulnerability
- Previous by thread: EasyCMS vulnerable to XSS injection.
- Next by thread: [SECURITY] [DSA 951-2] New trac packages fix SQL injection and cross-site scripting
- Index(es):
