Tickets :: Comment on [#8398] Cross Site Scripting Vulnerability

* Your Email Address
* Spam protection	Enter the letters below: . .. .___.. . __. \|\ \|\| _/ \|_/ (__ \| \\|\|___./__.\| \.__)
Comment	> A cross site scripting vulnerability exists. Proof of concept: > > > > http://hordeserver.com/horde/passwd/main.php?backend="><!--a75c305b1c0a6022--><script>alert('XSS')</script>&userid=stevejobs&return_to=&oldpassword=foo&newpassword0=foo&newpassword1=foo&submit=Change%20Password
Attachment
Watch this ticket