[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

SiteCore XML Control Script Insertion

Hey All,

Sitecores “special way” of displaying XML Controls directly allows for a Cross Site Scripting Attack – more can be achieved with these XML Controls and will be documented in another vulnerability report


More information can be found at http://www.securatary.com/vulnerabilities - Also listed is a useful text file for use with Burp when auditing SiteCore.