Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

JAWS Glossary HTML Injection Vulnerability

JAWS is prone to an HTML injection vulnerability in the Glossary module. The module fails to sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.







 

Privacy Statement
Copyright 2009, SecurityFocus