Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

Re: RE: TimeTrex Time and Attendance Cookie Theft
From: hi () hi com
Date: 22 Aug 2008 18:53:29 -0000
Even if it did work, the user would have to submit the form with the username or password fields containing the exploit 
code rather then enter their own information.

Pretty unlikely to pull off.

Regardless I talked to the developers and any potential issue will be fixed in v2.2.13 which is scheduled to be 
released before August 25th 2008.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]