ICQ Webfront guestbook Cross-Site Scripting Vulnerability

It has been reported that ICQ Webfront is prone to a cross-site scripting vulnerability in the message field of the guestbook module. This issue is caused by improper sanitization of user-supplied data.

Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials from a user. Other attacks are possible as well.


 

Privacy Statement
Copyright 2010, SecurityFocus