CVE-2008-0820

Cross-site scripting XSS vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $SERVER'PHPINFO'. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $SERVER'PHPSELF', and "This is not an Etomite...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Etomite 0.6.1.4 Final allows remote attackers to inject arbitrary web script or HTML via $SERVER'PHPINFO'. NOTE: the vendor disputes this issue in a followup, stating that the affected variable is $SERVER'PHPSELF', and "This is not an Etomite...

CVE-2008-0820

CVE-2008-0820 affects Etomite 0.6.1.4 Final with a reported XSS in index.php exploitable via the server variable (initially cited as $_SERVER['PHP_INFO'], vendor later asserts the variable is $_SERVER['PHP_SELF']). Multiple sources corroborate an XSS vulnerability, but the vendor disputes the rep...