Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

MAXdev MD-Pro Cross-Site Scripting Vulnerability

Cross-site scripting vulnerabilities reportedly affect MD-Pro The vulnerabilities exist in the "wl-search.php" and "dl-search.php" scripts and are due to input validation errors. Successful exploitation may allow for attacks against other users of the application or others hosted on the same domain. Session hijacking, content spoofing and other attacks may be possible.







 

Privacy Statement
Copyright 2009, SecurityFocus