CVE-2013-6882

Affected product: CRU Ditto Forensic FieldStation (firmware 2013Oct15a and earlier). Vulnerabilities documented: Multiple cross-site scripting (XSS) vulnerabilities via the username parameter during login and via unspecified form fields for authenticated users. In addition, related exploit materi...

Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities

Title: Ditto Forensic FieldStation, multiple vulnerabilities Versions affected: = 2013Oct15a all Vendor: CRU Wiebetech Discovered by: Martin Wundram Email: [email protected] Date found: 2013-04-22 Date published: 2013-12-12 Status: partially patched 0 ======== Introduction / Background / Impac...