eTicket Multiple Scripts Multiple Input Validation Vulnerabilities

Attackers may exploit these issues through a browser.

To exploit the cross-site scripting or authentication-bypass issues, an attacker must entice an unsuspecting victim into visiting a malicious URI.

The following proof-of-concept code is available:


 

Privacy Statement
Copyright 2010, SecurityFocus