Actions
Bug #7999
closed
XSS via 'hostname' parameter in diag_dns.php
Start date:
10/24/2017
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All
Description
On diag_dns.php the 'hostname' parameter is sent back to the user without encoding in a JavaScript block, leading to an XSS
Affects 2.3.x and 2.4.x
To test, enter this for the hostname:
0.0.0.0";alert("diag_dns XSS")//
Updated by
Actions