Tickets :: Comment on [#3523] login page cross site scripting vulnarable

* Your Email Address
* Spam protection	Enter the letters below: . __ __.. .. . \|/ `(__ \|__\|\| \| \__\|\__..__)\| \|\|/\\|
Comment	>> I can't reproduce this. Where and when exactly do you see the image? > > > > when you put the following line in the username and in the password box: > > "><img src="http://www.google.nl/logos/olympics06_alpine.gif"> > > > > including all " and > the image will appear on the site > > i'm using horde 3.09 and the default login page
Attachment
Watch this ticket