BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
File Upload Concern in Front Account 2.3.13 and OpenDocMan 1.2.6.2 Dec 12 2012 05:15PM
Kenneth F. Belva (ken silverbackventuresllc com)
I have put this in a separate report since they are not strictly
vulnerabilities.

By default, both software apps allow the end user to upload any HTML
file they wish. This means that files with malicious javascript may be
uploaded to the server.

The issue is that when a user clicks view for these ...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus