NISCC has reported some vulnerabilities in MindAlign, which can be exploited to enumerate valid users, gain knowledge of various information, conduct cross-site scripting attacks, cause a DoS (Denial of Service), or bypass certain security restrictions.

The vulnerabilities are caused due to various unspecified errors including bad configuration parameters and vulnerable third-party software used by the application.

The vulnerabilities have been reported in version 5.0. Other versions may also be affected.

Solution
The vendor has reportedly issued fixes, which can be obtained by contacting Parlano support.

Provided and/or discovered by
NISCC

Changelog
Further details available to Secunia VIM customers

Original Advisory
NISCC:
http://www.uniras.gov.uk/niscc/docs/br-20050812-00673.html

Deep Links
Links available to Secunia VIM customers