Межсайтовый скриптинг в FAQ-O-Matic (crossite scripting)

http://faqomaticsite/cgi-bin/fom/fom.cgi?cmd=scriptalert"superpetz"/script&file=1&keywords=superpetz...

[SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability]

SUPERPETZ ADVISORY 002- Faq-O-Matic Cross-Site Scripting Vulnerability // + : : ++ :o:+++ -/++ / / collect them all! this one is a lynx!! TITLE: Faq-O-Matic Cross-Site Scripting Vulnerability ----- discovery date: February 1st, 2002 -------------- publication date: February 4th, 2002...

Faq-O-Matic 2.62.7 - Cross-Site Scripting

Faq-O-Matic 2.62.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4023/info FAQ-O-Matic is a freely available, open-source FAQ Frequently Asked Questions manager. It is intended to run on Linux and Unix variants. FAQ-O-Matic does not sufficiently filter script code from URL...

Faq-O-Matic 2.6/2.7 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4023/info FAQ-O-Matic is a freely available, open-source FAQ Frequently Asked Questions manager. It is intended to run on Linux and Unix variants. FAQ-O-Matic does not sufficiently filter script code from URL parameters. It is possible to create a malicio...

sans.sec-v3n5.txt

Subject: May SANS Security Digest Vol. 3 Num. 5 Fr: Rob the SANS Mailing List Guy Here's the May SANS Network Security Digest. I hope your spring is going well! RK -----BEGIN PGP SIGNED MESSAGE----- ================================================================= | | | @@@@ @@ @ @ @@@@ | | @ @ @...