Taha Portal 3.2 – ‘sitemap.php’ Cross-Site Scripting

Exploit Database
113 阅读

作者： Bl4ck.Viper

日期： 2011-06-18
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/35867/

source: https://www.securityfocus.com/bid/48342/info

Taha Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Taha Portal 3.2 is vulnerable; other versions may also be affected.

http://www.example.com/index.asp?id=3&serword=%3Cscript%3Ealert%28%22sss%22%29;%3C/script%3E

last Exploits
Taha Portal 3.2 – ‘sitemap.php’ Cross-Site Scripting的更多信息

Care2x Integrated Hospital Info System 2.7 – ‘Multiple’ SQL Injection：
amoeba CMS 1.01 – Multiple Vulnerabilities：
b2evolution 4.1.6 – Multiple Vulnerabilities：
EasyService Billing 1.0 – SQL Injection / Cross-Site Scripting：
iTech Classifieds Script 7.41 – SQL Injection：
Joomla! Component DentroVideo 1.2 – ‘upload.php’ Arbitrary File Upload：
Joomla! Component hwdVideoShare – ‘flash_upload.php’ Arbitrary File Upload：
OrangeHRM 2.6.2 – ‘jobVacancy.php’ Cross-Site Scripting：