Menu ▾ ▴

#622 Cross-site scripting vulnerability.

closed-fixed
Konstantin Riabitsev
None
9
2002-04-16
2002-04-16
Konstantin Riabitsev
No

If the html message contains a <<script sequence, it
will get past the html filters and be executed by the
browser, leading to possible session hijacking and
other nastiness.

Discussion

  • Konstantin Riabitsev

    Konstantin Riabitsev - 2002-04-16

    Logged In: YES
    user_id=147248

    Fix is in place. MagicHTML should be redone, period.

     

  • Konstantin Riabitsev

    Konstantin Riabitsev - 2002-04-16
    • status: open --> closed-fixed
     

Log in to post a comment.