GitLab: Cross-site Scripting (XSS) - Stored in RDoc wiki pages

Summary When creating an RDoc wiki page it's possible to use a large number of html tags and attributes that are normally sanitized, when creating a linkable image of the format link For example it is possible to specify a class attribute when creating an image link: rdoc a will generate the...

[KAPDA::#8] Domain Manager Pro Vulnerability

KAPDA::8 Domain Manager Pro Vulnerability Domain Manager Pro - Fake form injection KAPDA New advisory Vulnerable Products : Domain Manager Pro Vendor: SiteTurn ,http://www.siteturn.com/ Vulnerability: Fake form injection XSS Date : -------------------- 2005/08/08 1384/05/17 Hijri Shamsi About...