We provide a full range of hardware and software support based services, onsite and off-site including Monitoring services, Remote management and Service level support. | Rapid Classified advsearch.asp dosearch Variable XSS |
| Sunday, 19 November 2006 | |
|
Rapid Classified contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'dosearch' variable upon submission to the advsearch.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity. Read more... |