New article on Sicherheit-Online
Today, my new article about some XSS findings on four single portals was published on the website Sicherheit-Online.org
Enjoy yourself :)
Advisory:
|
www.datingcafe.de – Cross-site Scripting vulnerability
|
Advisory ID:
|
SSCHADV2012-027
|
Author:
|
Stefan Schurtz
|
Affected Software:
|
Successfully tested on www.datingcafe.de
|
Vendor URL:
|
|
Vendor Status:
|
fixed
|
Advisory:
|
t-online.de eMail Center – Cross-Site Request Forgery & XSS vulnerabilities
|
Advisory ID:
|
SSCHADV2012-099
|
Author:
|
Stefan Schurtz
|
Affected Software:
|
Successfully tested on email.t-online.de
|
Vendor URL:
|
|
Vendor Status:
|
fixed
|
Advisory:
|
www.elitepartner.de – Cross-site Scripting vulnerability
|
Advisory ID:
|
SSCHADV2012-024
|
Author:
|
Stefan Schurtz
|
Affected Software:
|
Successfully tested on www.elitepartner.de
|
Vendor URL:
|
|
Vendor Status:
|
fixed
|
Advisory:
|
heise.de – Cross-site Scripting vulnerability
|
Advisory ID:
|
SSCHADV2013-002
|
Author:
|
Stefan Schurtz
|
Affected Software:
|
Successfully tested on heise.de
|
Vendor URL:
|
|
Vendor Status:
|
fixed
|