Found an XXS hole in testing a few things, you want to fix this before a
full scale release

http://formbuilder2.esourcehome.com/?module=forms&action=view&ID=%3Cscript%3Ealert(%22sux%20sux%22)%3C/script%3E<script>alert(document.cookie);</script


Could be fixed by sanitizing all GET input. Login, click the link and you
will see your cookie.

-phpninja


On 6/14/07, Trevyn Meyer <[EMAIL PROTECTED]> wrote:

Great.
http://esourcehome.com/wiki/index.php?title=Projects

I will be putting up more stuff here shortly.  Let me know if you are
interested?  And if Alvaro is still on this list, I hope you repond, I
want your feedback, and I want to learn more about photon.

Trevyn


Victor Villa wrote:
>> mindjuju "i think they have plans to integrate a CRM "
>> I am curios to know what cause you to ask that?
>>
>
> Trevyn,
>
> In an email you sent on 4/11, you said this:
>
>
>> 3 email4CRM
>> http://esourcehome.com/crm.png
>> This is a basic CRM tool that I use for form builder or any other
>> leads that can come in via email.
>>
>
> So when I started to look at your app, I started to research everything
you
> said on it previously.
>
> mj/v
>
>
>


_______________________________________________

UPHPU mailing list
[email protected]
http://uphpu.org/mailman/listinfo/uphpu
IRC: #uphpu on irc.freenode.net


_______________________________________________

UPHPU mailing list
[email protected]
http://uphpu.org/mailman/listinfo/uphpu
IRC: #uphpu on irc.freenode.net

Reply via email to