Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Centreon <= 1.4.2.3  (index.php) Remote File Disclosure

PHPMyTourney Remote file include Vulnerability

PR07-41: XSS on Juniper Networks Secure Access 2000

123 Flash Chat Module for phpBB

From:	vijayv_(at)_cascentral.com <vijayv_(at)_cascentral.com>
Date:	29.02.2008
Subject:	XSS on XRMS- open source CRM

XRMS: An open source web enabled LAMP based CRM.
Vulnerability: Confirmation messages upon updates in XRMS are clear text passed across in the URL. Simple test of injection of a script resulted in exposing cross site scripting vulnerability.