Tell us what you really think Adam :) Seriously though, you are, as usual, exactly right. Whoever submitted this as a 'Fusebox' vulnerability doesn't seem to know much about web development in general. This would be a problem with a poorly written application in any language and not something that is, or should be, handled natively by the fusebox core files.
Adrocknaphobia wrote: > This doesnt look like a fusebox vulnerability. Rather it is a > vulnerability of any web application that displays URL values in the > processing page. > > Fusebox does not output these values to HTML by default. The developer > of the application would need to code it in that manner. For exmaple > there are a number of fusebox applications that do not output html at > all. > > Whoever submitted this to SecurityFocus is a retard. > > -Adam -- Tim Heald Senior Web Developer TeraTech, Inc. 2003 Winner CFDJ awards Best Consulting Service Email: [EMAIL PROTECTED] Voice: 1-301-424-3903 x111 Web: http://www.teratech.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:214181 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
