Opened 9 years ago

Closed 9 years ago

#2908 closed defect (fixed)

report: xss bug

Reported by: U7atc8 Owned by: Tom Hughes
Priority: critical Milestone:
Component: website Version:
Keywords: Cc:

Description

bug in: http://www.openstreetmap.org/user/">[xss]

you can test it with:

http://www.openstreetmap.org/user/"><body onload="alert('bug found by unnex')">

or

http://www.openstreetmap.org/user/%22%3E%3Cbody%20onload=%22alert%28%27bug%20found%20by%20unnex%27%29%22%3E

if you like to contact me. you can make this on the following email adress: root@…


greetz unnex

Change History (1)

comment:1 Changed 9 years ago by Tom Hughes

Component: adminwebsite
Resolution: fixed
Status: newclosed

Fixed.

Note: See TracTickets for help on using tickets.