MyWebSQL 3.4 Cross Site Scripting

Advisory ID: HTB23221 Product: MyWebSQL Vendor: http://mywebsql.net/ Vulnerable Versions: 3.4 and probably prior Tested Version: 3.4 Advisory Publication: June 25, 2014 without technical details Vendor Notification: June 25, 2014 Public Disclosure: September 3, 2014 Vulnerability Type: Cross-Site...

Reflected Cross-Site Scripting (XSS) in MyWebSQL

High-Tech Bridge Security Research Lab discovered vulnerability in MyWebSQL, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Reflected Cross-Site Scripting XSS in MyWebSQL: CVE-2014-4735 The vulnerability is caused by insufficient sanitization of the "table" HTTP GET paramet...