SAINT Corporation XSS Defacement

Vulnerability Management, Assessment, Penetration Testing

SAINT Corporation provides network security tools to financial, government and educational institutions around the world (SAINT customers). The SAINT® vulnerability assessment tools are recognized as industry leaders by top information-security organizations and publications.

SAINT Corporation website vulnerable to Cross-site scripting,html injection and redirect.

Proof of concept:







http://www.saintcorporation.com/cgi-bin/archive.pl?cmd=search&list=HTML Injection









http://www.saintcorporation.com/cgi-bin/archive.pl?cmd=index&list=XSS

See also Tenable Network Security XSS Vulnerability