Re: VHCS 2.x HTTP Error Cross Site Scripting

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: VHCS 2.x HTTP Error Cross Site Scripting
From: Moritz Naumann <securityfocus.com@xxxxxxxxxxxxxxxxxx>
Date: Thu, 24 Nov 2005 04:44:19 +0100
In-reply-to: <4383897E.30708@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Openpgp: id=277F060C
References: <4383897E.30708@xxxxxxxxxxxxxxxxxx>
User-agent: Mozilla Thunderbird 1.0.7 (X11/20051017)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Moritz Naumann schrieb:

> SOLUTIONS 
> Moritz Naumann IT Consulting & Services has crafted a
> unified diff patch against VHCS 2.4.6.2 which is available at 
> http://moritz-naumann.com/adv/0006/vhcsxss/patch/index.php.diff

The patch had been lost during an upgrade, but has since been restored.

Moritz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDhTcTn6GkvSd/BgwRAhZBAKCRdciTYrOxAy+SyAz23EWyGpRM3QCeJ6HI
PCQ5K5TsnyD3hoQ2nSBnUSE=
=eKMC
-----END PGP SIGNATURE-----

References:
- VHCS 2.x HTTP Error Cross Site Scripting
  - From: Moritz Naumann

Prev by Date: 2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security
Next by Date: eFiction <= 2.0 multiple vulnerabilities
Previous by thread: VHCS 2.x HTTP Error Cross Site Scripting
Next by thread: Horde MIME Viewer vulnerability
Index(es):
- Date
- Thread