Cross-Site Scripting in Aestiva's HTML/OS
"Aestiva HTML/OS is a high-performance database engine and development suite for building advanced web sites and web-based software products." SUMMARY: The Aestiva HTML/OS CGIs appear vulnerable to XSS due to poor error reporting no metacharacter filtering. Anything you want can be appended to an...