Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

OKBSYS Lite Search.ASP Cross-Site Scripting Vulnerability

OKBSYS Lite is prone to a cross-site scripting vulnerability.

This issue is due to a failure in the application to properly sanitize user-supplied input to the 'search.asp' script.

This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

OKBSYS Lite 1.0 and prior versions are affected.







 

Privacy Statement
Copyright 2009, SecurityFocus