VisionSource CMS <= 0.6 XSS vectors

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: VisionSource CMS <= 0.6 XSS vectors
From: zerogue@xxxxxxxxx
Date: 6 May 2006 12:56:32 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

VisionSource CMS <= 0.6 XSS vectors

Discovered by: Nomenumbra
Date: 5/4/2006
impact:moderate (privilege escalation,possible defacement)

No data inside the user's profile is filtered thus allowing them to
embed malicious XSS vectors to potentially steal cookies.

Nomenumbra/[0x4F4C]

Prev by Date: [ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution
Next by Date: WebsiteBaker CMS lack of sanitizing
Previous by thread: [ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution
Next by thread: WebsiteBaker CMS lack of sanitizing
Index(es):
- Date
- Thread