Lucene search
+L

1 matches found

securityvulns
securityvulns
added 2002/08/26 12:0 a.m.37 views

phpReactor - Cross-Site Scripting via STYLE

phpReactor has recently been updated to eliminate several known cross-site scripting vulnerabilities. Among these changes was to reduce the tags allowed in posts, profiles, etc. down to B, I, and FONT. However, using the "STYLE" attribute, one can still defeat this: b...

0.7AI score
SaveExploits0
Rows per page
Query Builder