Secunia Advisory: SA10462
Release Date: 2003-12-18

Critical: Less critical
Impact: Cross Site Scripting
Where: From remote

Software: Advanced Research SARA 4.x


Description:
Thomas M. Payerle has reported a vulnerability in SARA allowing malicious people to conduct Cross Site Scripting.

The problem is that banners from certain services aren't properly sanitised before they are printed in the administrative interface. This could be exploited to conduct Cross Site Scripting if the results are viewed in a browser through the web based administrative interface.

This has been reported to affect version 4.2.6 and 4.2.7, prior versions may also be affected.

Solution:
Version 5.0.0 is not vulnerable.

http://www-arc.com/sara/

Provided and/or discovered by:
Reported by Thomas M. Payerle.

Source: Secunia

OS/2-eCS-ArcaOS General News

More in General  

OS/2-eCS-ArcaOS Software News

More in Software  

Latest Forum Posts

Site News

More in Site News