Bug#717082: XSS on developer.php

To: submit@bugs.debian.org
Subject: Bug#717082: XSS on developer.php
From: Fernando Muñoz <fernando@null-life.com>
Date: Tue, 16 Jul 2013 10:03:39 -0500
Message-id: <[🔎] CAEr-gPEGDyO=UQZQ4dP2q4qdN13UDWdt9h-=H0AdKAkPLYK-2Q@mail.gmail.com>
Reply-to: Fernando Muñoz <fernando@null-life.com>, 717082@bugs.debian.org

Package: qa.debian.org
Severity: important

The following links shows XSS flaws, it will show an alert on Firefox and put a marquee on the site.

http://qa.debian.org/developer.php?login="><script>alert(1)</script>

Additional variables seems to be affected too.

- Fernando

Reply to: