Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Advance-Flow Unspecified Cross Site Scripting Vulnerability

Advance-Flow is prone to an unspecified cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.

Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other attacks.

Advance-Flow 4.41 and prior versions are vulnerable to this issue.







 

Privacy Statement
Copyright 2009, SecurityFocus