Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: EasyCMS vulnerable to XSS injection. |
|---|---|
| Date: | 31 Jan 2006 16:14:48 -0000 |
Kind of you to notice, our system will during the next week be patched for XSS flaws in the different input fields which might be of concern for XSS. The rest of the system will also be checked to reensure that all user-input is processed securely. We take this matter seriusly, and would like to inform that you are referring to the input fields of the contact form - which outputs a reciept with the given data which was not checked for XSS, since we don't use cookies in Easy CMS. I will update this post when we have more news on this upcomming security update. regards, Kim Steinhaug Easy CMS developer
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Re: Winamp 5.12 - 0day exploit - code execution through playlist, Juha-Matti Laurio |
|---|---|
| Next by Date: | [Full-disclosure] DISIT - OPEN SOURCE DISASSEMBLER ENGINE, Piotr Bania |
| Previous by Thread: | EasyCMS vulnerable to XSS injection., preben |
| Next by Thread: | Re: Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401), orambaldini |
| Indexes: | [Date] [Thread] [Top] [All Lists] |