[Dolibarr-bugtrack] [Bug #1525] XSS in several values of third card

[Doliforge]

Is this email not displaying correctly? update email preferences.

Dolibarr ERP & CRM » Bugs » bug #1525

XSS in several values of third card

Latest modifications

Laurent Destailleur (eldy)

2014-07-26 17:33 (Europe/Paris)

Can your provide more information ?
What do you mean with XSS into some values of thirdparty. Screnshot just show you edit value with d, so what's wrong ?

Changes:

Status:

Open → Need more info

Answer now

Snapshot

Details
Submitted by:	Marcos García (marcosgdf)		Submitted on:	2014-07-13 19:09
Last Modified On:	2014-07-13 21:37
Summary:	XSS in several values of third card
Description:	XSS in several values of third card
Step to reproduce bug:	Check screenshots.
Detected in version:	3.5.3		Category:	Module: Thirdparties
Severity:	7		OS Type/Version:
PHP version:			Database type and version:
Status
Status:	Need more info		Assigned to:	None
Resolution:	None

Comments

Laurent Destailleur 2014-07-26 17:33

Can your provide more information ?
What do you mean with XSS into some values of thirdparty. Screnshot just show you edit value with d, so what's wrong ?

 Direct link to the artifact  |  Update your email preferences