Jan Erdmann Jebuch 1.0 - HTML Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1054722 漏洞类型
发布时间 2004-10-19 更新时间 2004-10-19
漏洞平台 PHP CVSS评分 N/A
source: http://www.securityfocus.com/bid/11463/info

It is reported that Jebuch is susceptible to an HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input.

This may allow an attacker to inject malicious HTML and script code into the application. An unsuspecting user viewing a page that contains the malicious embedded code will have the attacker-supplied script executed within their browser in the context of the vulnerable site. This issue may be leveraged to steal cookie based authentication credentials. Other attacks are also possible.

Version 1.0 of Jebuch is reported vulnerable to this issue.

[img]"?" onError="window.location='http://www.example.com'"[/img]