CMS Faethon Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	18505
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 07 2006 12:00AM
Updated:	Jun 20 2006 03:35PM
Credit:	An anonymous user is credited with discovering these vulnerabilities.
Vulnerable:	CMS Faethon CMS Faethon 1.3.2
Not Vulnerable:

CMS Faethon Multiple Cross-Site Scripting Vulnerabilities

CMS Faethon is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user.

An attacker could exploit these vulnerabilities to inject hostile HTML and script code into the browser session of other users of the application.

CMS Faethon Multiple Cross-Site Scripting Vulnerabilities

Attackers can exploit this issue by enticing a user to follow a malicious link.

CMS Faethon Multiple Cross-Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

CMS Faethon Multiple Cross-Site Scripting Vulnerabilities

References:

• CMS Faethon Homepage (CMS Faethon)