Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw Jul 22 2008 10:20AM
Tim Loshak (tim loshak gmail com)
SECURITY ADVISORY CS-2008-2

Vulnerability: Improper validation of external parameters
Vendor: SocialEngine (http://www.socialengine.net)
Affected versions: <2.83
Risk: High

I. DESCRIPTION

Improper validation of browser cookies leads to complete control over
client host.

II. BACKGROUND

Durin...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus