Zend studio location Cross-Domain Scripting Vulnerability
| From: | Daevid Vincent | Date: | Tue, 12 Oct 2010 22:19:07 +0000 |
| Subject: | Zend studio location Cross-Domain Scripting Vulnerability | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-308663@lists.php.net to get a copy of this message | ||
http://80vul.com/Zend%20studio/Zend%20studio%20location%20Cross.htm
Interesting. A co-worker and I were JUST noticing how our PHPDoc comments
were being parsed pretty much verbatim including <b> tags and links and
stuff and thought, "wow, that's stupid, that's just a XSS or injection
waiting to happen". LOL. Guess someone's ears were burning. ;-)