bugGNU FM - Bugs: bug #26289, XSS injection

 
 

bug #26289: XSS injection

Submitter:  None
Submitted:  Wed 22 Apr 2009 10:30:40 AM UTC
Votes: 30
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 23 Apr 2009 12:32:39 PM UTC, comment #1: 

I guess it should have Critical Severity. It is security bug.

Maciej Piechotka <uzytkownik>
Wed 22 Apr 2009 10:30:40 AM UTC, original submission:  

http://turtle.libre.fm/?u=Zen%20Vantalye%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

I`m not good write in english langage and not write about repair this bugs.


Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by uzytkownik (Posted a comment)
  • -email is unavailable- added by uzytkownik (Voted in favor of this item)
  •  

    There are 30 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-04-23 uzytkownik Carbon-Copy- Added uzytkownik

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code