Additional Stored XSS were found in other management pages.
[media=youtube]tFCLDAH35jU[/media]
D
Posts made by Dolev Farhi
-
RE: Stored XSS vulnerability in fog project version 0.27 through 0.32posted in Bug Reports
-
Stored XSS vulnerability in fog project version 0.27 through 0.32posted in Bug Reports
hi,
I would like to bring to your attention there is a persistent XSS vulnerability in the printer management page
in general, it is possible to add a crafted printer, and once a user/admin would visit the printer management page I could potentially steal his cookies
POC can be found here:
[media=youtube]fGncIGB8F0U[/media]