search

Custodela / Riches

0 stars 3 forks source link

CX CGI_Stored_XSS @ riches/pages/Backup.jsp [master] #111

Closed kmcdon83 closed 5 years ago

kmcdon83 commented 5 years ago

CGI_Stored_XSS issue exists @ riches/pages/Backup.jsp in branch master

Unvalidated DB output was found in line number 11 in riches\pages\Backup.jsp file. A possible XSS exploitation was found in print at line number 12.

Severity: Medium CWE:79 Vulnerability details and guidance Internal Guidance Lines: 11

Code (Line #11):

    while ((data = r.readLine()) != null) {
kmcdon83 commented 5 years ago

Issue still exists.