Re: XSS vulnerability in Expression CMS
: Vulnerability ID: HTB22618
: Reference: http://www.htbridge.ch/advisory/xss_vulnerability_in_expression_cms_1.html
: Product: Expression
: Vendor: Backbone Technology ( http://www.backbonetechnology.com )
: Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions
How do you know you tested a current version? The vendor web site does not
list a current version on the page:
http://www.backbonetechnology.com/expression/
They do not appear to offer a demo, and it seemingly requires a
consultation to purchase. They do list who is running it:
http://www.backbonetechnology.com/portfolio/
Did you test one of their customers' live sites to find this
vulnerability? If so, again, how do you not know the version you tested?
討論串 (同標題文章)
本文引述了以下文章的的內容：
完整討論串 (本文為第 3 之 3 篇)：