Joeychgo
11-25-2005, 03:12 PM
I ran across this
PhotoPost Script Injection Vulnerability
PhotoPost is prone to a script injection vulnerability. This is due to a lack of proper sanitization of user-supplied input.
A malicious user may cause arbitrary script code to be executed in the Web browser context of an unsuspecting victim. This may lead to the theft of cookie-based authentication credentials in the context of the victim's browser application.
Further attacks are also possible.
I found it here: http://www.securityfocus.com/bid/14671/discuss
PhotoPost Script Injection Vulnerability
PhotoPost is prone to a script injection vulnerability. This is due to a lack of proper sanitization of user-supplied input.
A malicious user may cause arbitrary script code to be executed in the Web browser context of an unsuspecting victim. This may lead to the theft of cookie-based authentication credentials in the context of the victim's browser application.
Further attacks are also possible.
I found it here: http://www.securityfocus.com/bid/14671/discuss
