Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
BID:16056
Info
Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
| Bugtraq ID: | 16056 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 23 2005 12:00AM |
| Updated: | Apr 07 2006 05:13PM |
| Credit: | Discovered by rakstija r0t3d3Vil. |
| Vulnerable: |
Epic Designs eggblog 2.0 |
| Not Vulnerable: |
Epic Designs eggblog 3.0 b |
Discussion
Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
The eggblog application is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The eggblog application is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
Solution:
The vendor has released version 3.0.0b to address this issue.
Epic Designs eggblog 2.0
Solution:
The vendor has released version 3.0.0b to address this issue.
Epic Designs eggblog 2.0
-
Epic Designs eggblog_3.00b.zip
http://prdownloads.sourceforge.net/eggblog/eggblog_3.00b.zip
References
Epic Designs Eggblog Search.PHP Cross-Site Scripting Vulnerability
References:
References:
- eggblog Home Page (Epic Designs)
- eggblog vuln. (rakstija r0t3d3Vil)