Critical Bug on Ubuntu.com

[Thomas Ward]

What did you do while on the site to run into this?  As it stands, the
brainstorm site is running perfectly, on Windows, Ubuntu Linux, and a RHEL
system I have here, with zero XSS related things.

------
Thomas Ward
Ubuntu BugSquad Member

On Fri, Mar 29, 2013 at 8:53 AM, ali hasan ghauri <
alihasanghauri at hotmail.com> wrote:

> Hello Sir ,
>
> I am Ali Hasan Ghauri , I found Vulnerability on ubuntu.com . kindly fix
> this Vulnerability as soon as possible .
>
> Here is Information About Vulnerability :
>
> POC :
> http://brainstorm.ubuntu.com/openofficeorg-writer/ideas_in_preparation/invalid/5%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert%28%22XSS%20By%20Ghauri%22%29%3C/script%3E
>
> Vulnerability Type : Cross Site Scripting (XSS)
> Bug Type : Critical Bug
> OS : Check this Vulnerability on any Operating System But i have Windows 8
> .
> Platform : Check this Vulnerability on Mozilla Firefox or Opera Browser .
>
> I hope You will Fix this Bug and pay me for this reported bug as a reward
> very soon .
>
> Thanks !
>
> Ali Hasan Ghauri <http://alihassanpenetrationtester.blogspot.com/> ,
> AHPT <http://alihassanpenetrationtester.blogspot.com/>
>
> --
> Ubuntu-bugsquad mailing list
> Ubuntu-bugsquad at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugsquad
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-bugsquad/attachments/20130329/254a71a0/attachment.html>