sivann/itdb

itdb 1.23 - Cross-Site Scripting (XSS)

Closed this issue · 10 comments

Chefkeks commented

@bestshow

Uploading itdb 1.23 - Cross-Site Scripting (XSS).docx…

Looks like you saved too soon, so you should re-upload the document maybe ;)

nikband commented

I think that it's a possibile "spam" with virus ...

Chefkeks commented

Yes I know, that's possible too, but since @bestshow opened an issue here with a valid word document too, I don't think so.

  • 👍1
nikband commented

I hope so in a good document from @bestshow. Please bestshow attach a new document

bestshow commented

OK，I re-upload the document again.
itdb 1.23 - Cross-Site Scripting (XSS).docx

bestshow commented

@nikband @Chefkeks Do you see the document ?

Chefkeks commented

Everything is fine now and document can be read.
Now its up to @sivann as developer to react.

  • 👍1
bestshow commented

Thanks.

  • 👍1
bestshow commented

@nikband @Chefkeks Please assign CVEs if you think they are suitable for identifiers.

sivann commented

Guys pleas read the "Security" and "Welcomed pull requests" paragraphs. ITDB is full of security issues, don't expose as is on public internet. There is no patching this, it needs to be rewritten.