S-277: Roundup Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-277: Roundup Vulnerability
# 1  
Old 04-25-2008
S-277: Roundup Vulnerability

Roundup, an issue tracking system, fails to properly escape HTML input, allowing an attacker to inject client-side code (typically JavaScript) into a document that may be viewed int he victim's browser. The risk is LOW. May allow an attacker to inject client-side code (typically JavaScript) into a document that may be viewed in the victim's browser.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

3 More Discussions You Might Find Interesting

1. News, Links, Events and Announcements

Bash vulnerability

Not sure if there is a post about it here somewhere already. Anyway: Remote exploit vulnerability in bash CVE-2014-6271 | CSO Online (3 Replies)
Discussion started by: zaxxon
3 Replies

2. Shell Programming and Scripting

Sum of all lines in file without roundup with awk

Hi, I have a file and I want to sum all the numbers in it. Example of the file: 0.6714359 -3842.59553830551 I used your forum (https://www.unix.com/shell-programming-scripting/74293-how-get-sum-all-lines-file.html) and found a script, what worked for me: awk '{a+=$0}END{print a}'... (8 Replies)
Discussion started by: mario8eren
8 Replies

3. UNIX for Dummies Questions & Answers

Vulnerability Alerts

Aside from CERT, are there any additional sources for unix/linux vulnerabilities? (1 Reply)
Discussion started by: kmgrady01
1 Replies
Login or Register to Ask a Question
HTML::Widget::Constraint(3pm)				User Contributed Perl Documentation			     HTML::Widget::Constraint(3pm)

NAME
HTML::Widget::Constraint - Constraint Base Class SYNOPSIS
my $c = $widget->constraint( $type, @names ); $c->message('Validation error.'); $c->names(@names); $c->not(1); DESCRIPTION
Constraint Base Class. METHODS
default_message Arguments: $message Return Value: $message Default error message for failing constraints. init Arguments: $widget Called once when process() gets called for the first time. javascript Arguments: $id Should return JavaScript for client side validation and the like. msg message Arguments: $message Contains the validation error message. mk_message Arguments: $message Returns a validation error message. names Arguments: @names Return Value: @names Contains names of params to test. not Arguments: $bool Return Value: $bool Negate constraint. prepare Arguments: $widget Called every time process() gets called. process Arguments: $widget, $params, @uploads Return Value: @errors Validates params and returns a arrayref containing HTML::Widget::Error objects representing failed constraints. process_js Arguments: $id Returns a hashref containing JavaScripts for client side validation and the like. render_errors Arguments: @names A list of element names for which an error should be displayed. If this is not set, the default behaviour is for the error to be displayed for all of the Constraint's named elements. validate Arguments: $value Return Value: $bool Validates a value and returns 1 or 0. AUTHOR
Sebastian Riedel, "sri@oook.de" LICENSE
This library is free software, you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.10.1 2007-03-01 HTML::Widget::Constraint(3pm)