- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 22677
- Проверка EDB
-
- Пройдено
- Автор
- JEIAR
- Тип уязвимости
- REMOTE
- Платформа
- WINDOWS
- CVE
- null
- Дата публикации
- 2003-05-29
Код:
source: https://www.securityfocus.com/bid/7745/info
P-Synch does not adequately filter HTML code from URL parameters, making it prone to cross-site scripting attacks. Code will be executed in the security context of the system running P-Synch.
This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users. Other attacks are also possible.
https://path/to/psynch/nph-psa.exe?css=">[VBScript, JScript etc]- Источник
- www.exploit-db.com
