6:31 AMSparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities
Yaniv Miron aka "Lament" Advisory Feb 28, 2010
Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities
TrackWise® by Sparta Systems: A Holistic Approach to Enterprise Quality Management
TrackWise by Sparta Systems is an enterprise quality management solution (EQMS)
that optimizes quality, ensures compliance and reduces costs for world-class clients
across a range of industries. TrackWise is the only enterprise quality management solution that offers the flexibility and configurability
to adapt to company-specific business processes,
enabling our world-class clients across a range of industries to define, track, manage
and report on the core activities vital to their success.
A malicious attacker may inject scripts into the TrackWise application.
Exploitation of this vulnerability results in the execution of arbitrary
code using a malicious link.
V. DISCLOSURE TIMELINE
Jan 2009 Vulnerability Found
Jan 2009 Vendor Notification
Feb 2010 Public Disclosure
Yaniv Miron aka "Lament".
|Total comments: 0|