PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
BID:14428
Info
PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
| Bugtraq ID: | 14428 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2005 12:00AM |
| Updated: | Jul 30 2005 12:00AM |
| Credit: | Discovery is credited to [email protected]. |
| Vulnerable: |
Toppe Toppe PC-Experience PC-Experience 2.0 PC-Experience PC-Experience 1.15 |
| Not Vulnerable: | |
Discussion
PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
PC-Experience and Toppe are prone to cross-site scripting attacks. This may let a remote attacker gain access to cookie-based authentications of other PC-Experience/Toppe users.
PC-Experience and Toppe are prone to cross-site scripting attacks. This may let a remote attacker gain access to cookie-based authentications of other PC-Experience/Toppe users.
Exploit / POC
PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
References:
References: