VoIP (Voice over IP) allows the integration of your data network and voice communication through a single medium, sending voice over your IP network (through LAN/WAN/Internet). | Rialto searchkey.asp Keyword Variable XSS |
| Sunday, 19 November 2006 | |
|
Rialto contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'Keyword' variable upon submission to the 'searchkey.asp' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity. Read more... |