PR10-17 Various XSS and information disclosure flaws within KeyFax response management system

0
58

Posted by research on May 09

PR10-17: Various XSS and information disclosure flaws within KeyFax
response management system

http://www.omfax.co.uk

Vulnerability found: 25th August 2010

Vendor informed:

Vulnerability fixed:

Severity: Medium/High

Description:

KeyFax response management system provides professional management of
housing and other repairs; KeyFax is normally accessed using a web
browser over port 80. Various KeyFax pages are vulnerable to a
reflective XSS…

Source: PR10-17 Various XSS and information disclosure flaws within KeyFax response management system