Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities

from [Fatih Ozavci] Network Security [Permanent Link]
Subject: [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities
Date: Wed, 24 Oct 2007 13:04:28 +0300 
GS07-02 RSA Keon Multiple Cross-Site Scripting Vulnerabilities

Date & Version : 07/31/2007 - 1.0

Description :

RSA KEON Registration Authority Web Interface has multiple Cross-Site
Scripting Vulnerabilities. Request-spk.xuda and Add-msie-request.xuda
components of RSA KEON are vulnerable to Cross-Site Scripting attacks.
An attacker could use these vulnerabilities for manipulating the
registration information, phising and other client side attacks.

Risk Level : Medium

Impact : Gain Access

Systems Affected :

RSA KEON Registration Authority Software

Remedy :

Contact RSA and visit https://knowledge.rsasecurity.com for remediation.

Credits :

Fatih Ozavci (GamaTEAM Member)
Caglar Cakici (GamaTEAM Member)
It's detected using GamaSEC Exploit Framework
GamaSEC.net Security Solutions (www.gamasec.net)

Original Advisory Link :

http://www.gamasec.net/english/gs07-02.html

References :

1. CERT - Vulnerability Note VU#342793
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities, Fatih Ozavci <=
Previous by Date:  [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection, [ NO REPLY ]
Next by Date:  Novell OpenSUSE SWAMP multiple XSS, morin . josh
Previous by Thread:  [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection, [ NO REPLY ]
Next by Thread:  Novell OpenSUSE SWAMP multiple XSS, morin . josh
Indexes:  [Date] [Thread] [Top] [All Lists]