Уязвимости в AltConstructor

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Brute Force уязвимостях в AltConstructor это украинская коммерческая CMS. XSS WASC-08: http://site/search/index?search=3Cbody20onload='alertdocument.cookie' Brute Force WASC-11: http://site/auth/login Уязвимы все версии...

AltConstructor Cross Site Scripting

Hello Full-Disclosure! I want to warn you about Cross-Site Scripting and Brute Force vulnerabilities in AltConstructor. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are all versions of CMS AltConstructor, before version released ...