AOH :: HP Unsorted V :: BX3369.HTM

VisualSentinel 0.7 Cross Agent Scripting Vulnerability



VisualSentinel 0.7 Cross Agent Scripting Vulnerability
VisualSentinel 0.7 Cross Agent Scripting Vulnerability



VisualSentinel 0.7 Cross Agent Scripting

# Discovered by:         Alfredo Panzera, Opencosmo Security
# Software vendor: http://www.opencosmo.com
# Date:                  31-05-2008

# Vulnerability:
The vulnerability consists on inject javascript code falsify the user agent's
attacker during an attack and then save in the log the user agent falsified.

# Vulnerable string:
$user_useragent = $_SERVER ['HTTP_USER_AGENT'];

# Solution:
The development team has promptly issued a patch the vulnerability.
You can download the latest version from the download page.
http://www.opencosmo.com/product-1.html


##############################################################################

Opencosmo Security
http://www.opencosmo.com 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.