Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
usd250 helpdesk XSS vulnerabily.
Oct 22 2007 10:37PM
Joseph giron13 gmail com
Within the helpdesk utility usd250, an XSS in the comments field is possible.
The comments strip script tags and replace them with (not allowed), but
script tags dont need to be in place for XSS. Something along the lines of...
[ more ]
Copyright 2010, SecurityFocus