{"issue":{"title":"Bug XSS en el menú.","user":{"id":990085,"login":"jaavier","url":"https://api.github.com/users/jaavier","gravatar_id":"421a9d8adcc79713891ac271a3104b7e","avatar_url":"https://secure.gravatar.com/avatar/421a9d8adcc79713891ac271a3104b7e?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"milestone":null,"created_at":"2011-08-19T02:31:20Z","labels":[{"name":"Critical","url":"https://api.github.com/repos/prey/prey-bash-client/labels/Critical","color":"b32626"}],"state":"closed","updated_at":"2011-12-21T01:37:26Z","id":1438211,"html_url":"https://github.com/prey/prey-bash-client/issues/201","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"closed_at":"2011-12-21T01:37:26Z","body":"Hola, he detectado un par de Bugs \"críticos\" llamado\r\nXSS Permanente en el panel de este servicio.\r\nUn Ejemplo de esto es en el nombre del dispositivo.\r\nEl cual nos permite ejecutar códigos HTML :\r\nNombre del dispositivo : <img src=\"http://preyproject.com/template/i/prey-control-panel.png\" /&gt;Nombre\r\nLo cual en nuestro panel posteriormente mostrará Administrando [Imagen] Nombre.\r\n\r\nOtro error en el panel es en la parte de crear un Alerta, en el contenido ingresamos:\r\n</textarea&gt;<img src=\"http://preyproject.com/template/i/prey-control-panel.png\" /&gt;\r\nLo que nos permitirá ejecutar también un XSS en el panel.\r\n\r\nSaludos, Javier.","number":201,"url":"https://api.github.com/repos/prey/prey-bash-client/issues/201","comments":12,"assignee":null},"action":"closed"}