[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: XSS vulnerability on bugs.debian.org

On Tue, 13 Nov 2007, T-Ping T-Ping wrote:
> I saw that someone named Fugitif had found an XSS vulnerability on
> bugs.debian.org that is still unpatched.
> Here is an example XSS for this bug:
> http://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=";><script>alert("XSS")</script>

Ah; one of them slipped through. I'll deal with this shortly.

Don Armstrong

If a nation values anything more than freedom, it will lose its
freedom; and the irony of it is that if it is comfort or money it
values more, it will lose that, too.
 -- W. Somerset Maugham

http://www.donarmstrong.com              http://rzlab.ucr.edu

Reply to: