[OPENMEETINGS-793] Possibility of Code Injection Vulnerability found.

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 4.0.0
• Environment: flash version 11.2.202.243 , mozilla firefox, linux
• Assignee: Maxim Solodovnik
• Reporter: rahul bhola
• Created: 16/Sep/13 04:55
• Updated: 21/Aug/14 17:30
• Resolved: 24/Jul/14 17:19

Description

Code injection vulnerability. I was using flash version 11.2.202.243 and OM hosted at http://demo.dataved.ru/openmeetings/ . there is a possibility of code injection in chat room. I was able to pass javascript code to the browser engine in mozilla firefox (linux)