CJOverkill Multiple Cross-Site Scripting Vulnerabilities
BID:11359
Info
CJOverkill Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 11359 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2004 12:00AM |
| Updated: | Oct 11 2004 12:00AM |
| Credit: | Discovery is credited to aCiDBiTS. |
| Vulnerable: |
CJOverkill CJOverkill 4.0.3 |
| Not Vulnerable: | |
Discussion
CJOverkill Multiple Cross-Site Scripting Vulnerabilities
It is reported that CJOverkill is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.
CJOverkill version 4.0.3 is reported prone to these issues. It is possible that other versions are affected as well.
It is reported that CJOverkill is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input.
CJOverkill version 4.0.3 is reported prone to these issues. It is possible that other versions are affected as well.
Exploit / POC
CJOverkill Multiple Cross-Site Scripting Vulnerabilities
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
CJOverkill Multiple Cross-Site Scripting Vulnerabilities
Solution:
It is reported that CJOverkill version 4.0.4 is not vulnerable to these issue. This is not confirmed at the moment. Please contact the vendor for more information.
Solution:
It is reported that CJOverkill version 4.0.4 is not vulnerable to these issue. This is not confirmed at the moment. Please contact the vendor for more information.
References
CJOverkill Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- CJOverkill Home Page (CJOverkill)