TUCoPS :: HP Unsorted C

TUCoPS :: HP Unsorted C :: tb11925.htm
ContentDM Search.php XSS Vulnerability

ContentDM Search.php XSS Vulnerability ContentDM Search.php XSS Vulnerability


ContentDM has a XSS vulnerability.
Many .gov sites run this software.
CDM fails to block special charachters etc so by searching for  We can make a popup saying XSS.
An attacker could steal cookies, redirect the page etc.
Found by Me(Rhys Phillips)
Date found: 3rd August 2007
Date Released: 3rd August 2007
Vendor has been contacted.