Beefy Boxes and Bandwidth Generously Provided by pair Networks DiBona
Syntactic Confectionery Delight
 
PerlMonks  

Re: Need help figure out this Security vulnerability on this cgi code

by bitingduck (Friar)
on Apr 01, 2012 at 06:05 UTC ( #962845=note: print w/ replies, xml ) Need Help??


in reply to Need help figure out this Security vulnerability on this cgi code

Do you not see anything obvious because you don't think the information is sensitive?

It's just warning you that the string sent by the browser POST can be read by anybody with access to the browser (or anyone in between it and the server, if they care to look) and that you should use SSL if there's anything sensitive. The scanner can't really tell if the data sent is sensitive. If you communicate with the user over SSL then the warning should go away. It may not be worth it, though it might make it at least a little harder to exploit the XSS vulnerabilities pointed out in your other post.


Comment on Re: Need help figure out this Security vulnerability on this cgi code

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://962845]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others meditating upon the Monastery: (12)
As of 2014-04-18 22:51 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    April first is:







    Results (472 votes), past polls