CoreCommunity ExtensionsIncubatorDistributionsTYPO3 4.5 ProjectsTYPO3 4.7 ProjectsTYPO3 6.0 ProjectsTYPO3 6.1 ProjectsTYPO3 6.2 Projects (+)

Bug #3003

XSS possible with comments_report 1.0.0

Added by Soren Malling about 4 years ago. Updated over 2 years ago.

Status:New Start date:2009-03-30
Priority:Should have Due date:
Assignee:- % Done:

0%
Category:-
Target version:-
Votes: 0

Description

Example: http://flux.beta.fdf.dk/index.php?id=771&tx_commentsreport_pi1[info]=%22%3CSCRIPT%3Ealert(%22XSS%22);%3C/SCRIPT%3E

Associated revisions

Revision 20920
Added by Bernd Schönbach about 4 years ago

[Bug 3003] HTML validation errors in the search widget, r=oliver

Revision 20921
Added by Bernd Schönbach about 4 years ago

[Bug 3003] HTML validation errors in the search widget, r=oliver

History

#1
Updated by Soren Malling almost 4 years ago

  • Assignee changed from Dmitry Dulepov to Ingo Renner

Reassigned the issue

#2
Updated by Ingo Renner almost 4 years ago

  • Assignee deleted (Ingo Renner)

Also available in: Atom PDF