PT-2008-2438 · Etomite · Etomite

Name of the Vulnerable Software and Affected Versions: Etomite version 0.6.1.4 Final Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The issue is disputed by the vendor, who claims the affected variable is $ SERVER'PHP SELF' and states...