AOH :: HP Unsorted V :: BU-2067.HTM

Astaro Security Linux v5 vulnerability
Vulnerability Astaro Security Linux v5
Vulnerability Astaro Security Linux v5

Program          : Astaro Security Linux v5
PoC              : XSS
Homepage : 
Found by         : Vincent Hautot
Contact          : v.hautot () sysdream com

//----- Application description

Astaro Security Linux is a complete network security solution that
protects organizations against a wide range of threats to security
and productivity.

//----- Description of vulnerability

This Xss was found on index.fpl page in the login form. Usig this flaw
it is possible to execute Javascript code.
Posting using multipart/form-data does not work ; use this data instead:


//----- Credits§ion_id=78 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH
We do not send spam. If you have received spam bearing an email address, please forward it with full headers to