[phpldapadmin] [ phpldapadmin-Bugs-2969826 ] XSS found in cmd.php

Bugs item #2969826, was opened at 2010-03-13 11:28
Message generated for change (Comment added) made by crig
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2969826&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 1.2.x
Status: Closed
Resolution: Fixed
Priority: 5
Private: No
Submitted By: Regis Lepers (thanat0s)
Assigned to: Nobody/Anonymous (nobody)
Summary: XSS found in cmd.php

Initial Comment:
example 

http://myserver/pla/htdocs/cmd.php?cmd=purge_cache&server_id=1%3Cscript%3Ealert%28%22Hi+boys%22%29%3C%2Fscript%3E

Version used RELEASE-1.2.0.4

----------------------------------------------------------------------

Comment By: Cristian Rigamonti (crig)
Date: 2010-03-19 22:23

Message:
Thanks! Do you plan to release a new PLA version (containing this bugfix)
soon?

----------------------------------------------------------------------

Comment By: Deon George (wurley)
Date: 2010-03-14 14:02

Message:
Thanks. Fix 0f78256 applied to GIT

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2969826&group_id=61828

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/