EUVD-2012-1631

Malware in sbrugna...

Apache OFBiz Webslinger Component XSS

The version of Webslinger included with Apache OFBiz hosted on the remote host has a cross-site scripting vulnerability. A remote attacker could exploit this by tricking a user into requesting a specially crafted URL, resulting in arbitrary script code execution. This version of OFBiz reportedly...