[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony

To: MustLive <mustlive@xxxxxxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony
From: bk <chort0@xxxxxxxxx>
Date: Wed, 21 Nov 2012 12:22:27 -0800

Imma let you finish, but this:
http://securityreactions.tumblr.com/post/35703074237/mustlive-has-posted-a-new-xss-technique

Nah, I lied. Don't bother finishing.

--
chort

On Nov 21, 2012, at 10:35 AM, MustLive wrote:

> Hello list!
> 
> I will draw your attention to XSS vulnerability

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

References:
- [Full-disclosure] XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony
  - From: MustLive

Prev by Date: [Full-disclosure] XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony
Next by Date: [Full-disclosure] Simple DOS POC lighttpd 1.4.31
Previous by thread: [Full-disclosure] XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony
Next by thread: [Full-disclosure] Simple DOS POC lighttpd 1.4.31
Index(es):
- Date
- Thread