Project

General

Profile

Actions
Copy link

Bug #991

closed
DB

multiple XSS issues

Bug #991: multiple XSS issues

Added by dave b almost 16 years ago. Updated almost 16 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
2.0
Start date:
11/04/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

/pkg_edit.php?xml=olsrd.xml&id=%22/%3E%3Cscript%3Ealert%282%29;%3C/script%3E/status_graph.php?if=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E
/graph.php?ifnum=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E&ifname=
/graph.php?ifnum=&ifname=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E

CB Updated by Chris Buechler almost 16 years ago Actions
Copy link
 #1

  • Subject changed from issue 2 THIS ONLY AFFECTS BETA 4 2.0 to multiple XSS issues
  • Category set to Web Interface

please don't open a bunch of tickets where there is only one issue.

DB Updated by dave b almost 16 years ago Actions
Copy link
 #2

Chris Buechler wrote:

please don't open a bunch of tickets where there is only one issue.

OH so you think I did that to annoy you?
Really. So you went and closed my bugs in the different web components, highlighting which versions were affected by what?
So I that for fun ...?
Try no.

While pfsense is awesome, imho you sir are not helping here...

SU Updated by Scott Ullrich almost 16 years ago Actions
Copy link
 #3

We prefer to have one ticket open per issue. Even though there where multiple files affected it is still one issue.

In the future when you are dropping stuff on the full disclosure lists why not email and give us a heads up.

Thanks

SU Updated by Scott Ullrich almost 16 years ago Actions
Copy link
 #4

  • Status changed from New to Feedback

Issues fixed in commits 98bcf1f8 6a937188 8625c24f 50b2f6ab

DB Updated by dave b almost 16 years ago Actions
Copy link
 #5

Scott Ullrich wrote:

We prefer to have one ticket open per issue. Even though there where multiple files affected it is still one issue.

In the future when you are dropping stuff on the full disclosure lists why not email and give us a heads up.

Thanks

I would have if it was more serious issue.
Trivial xss that take me almost no time to find can be found in "almost no time" by anyone else who cares.

CB Updated by Chris Buechler almost 16 years ago Actions
Copy link
 #6

  • Status changed from Feedback to Resolved
Actions
Copy link

Also available in: Atom