Re: RE: TimeTrex Time and Attendance Cookie Theft

[hi () hi com]

Even if it did work, the user would have to submit the form with the username or password fields containing the exploit 
code rather then enter their own information.

Pretty unlikely to pull off.

Regardless I talked to the developers and any potential issue will be fixed in v2.2.13 which is scheduled to be 
released before August 25th 2008.