Exploit Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass

[Exploiter]

EDB-ID

33181

Проверка EDB

1. Пройдено

Автор

ARSHAN DABIRSIAGHI

Тип уязвимости

WEBAPPS

Платформа

JAVA

CVE

cve-2009-2705

Дата публикации

2009-06-08

source: https://www.securityfocus.com/bid/36088/info

Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in further attacks.

We don't know which versions of SiteMinder are affected. We will update this BID when more details become available.

http://www.example.com/app/function?foo=bar%e0%80%bc