Posted by MG on Feb 21
Our addition to yesterday YGn advisory:# CVE-2012-0872
============ { Ariko-Security - Advisory #2/2/2012 } =============
OxWall Cross-site scripting (XSS)
Vendor's description of software and download:
# Oxwall Foundation http://www.oxwall.org/
Dork:
# N/a
Application Info:
#OxWall 1.1.1
Vulnerability Info:
# Type: XSS
Time Table:
# 13/02/2012 - Vendor notified
XSS:
#Input passed to the "plugin" parameter in index.php...