/search/index.cfm crossite scripting
Published:		12.02.2003
Source:		UK2SEC
SecurityVulns ID:		2589
Type:		remote
Level:		5/10
Description:		/search/index.cfm allows insert HTML tags via search paramter.

Original document

UK2SEC, Cross Site Scripting Advisory. (12.02.2003)

Discuss:

Read or add your comments to this news (0 comments)

CGI::Lite protection bypass
Published:		12.02.2003
Source:		BUGTRAQ
SecurityVulns ID:		2590
Type:		library
Level:		5/10
Description:		Not all dangerous shell characters are filtered by CGI::Lite::escape_dangerous_chars()

Affected:

CGILITE : CGI::Lite 2.0

Original document

Ronald F. Guilmette, Security bug in CGI::Lite::escape_dangerous_chars() function (12.02.2003)

Discuss:

Read or add your comments to this news (0 comments)