[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Bractus SunTrack Multiple XSS
- To: bugtraq <bugtraq@xxxxxxxxxxxxxxxxx>, fd <full-disclosure@xxxxxxxxxxxxxxxxx>
- Subject: Bractus SunTrack Multiple XSS
- From: Bugs NotHugs <bugsnothugs@xxxxxxxxx>
- Date: Tue, 3 Nov 2009 17:21:11 -0700
Vendor: Bractus (http://bract.us)
Product: SunTrack (http://bract.us/demo/login.jsp)
Multiple stored XSS vulnerabilities exist in the Bractus SunTrack
courier software suite.
Affected scripts:
newprofile.html (title parameter)
signup/signup.html (firstname, lastname, company parameter)
contact.html (firstname, lastname, address[0].street1 parameter)
--
BugsNotHugs
Shared Vulnerability Disclosure Account