NetCommons Unspecified Cross-Site Scripting Vulnerability
BID:19497
CVE-2006-4165 |Info
NetCommons Unspecified Cross-Site Scripting Vulnerability
| Bugtraq ID: | 19497 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 14 2006 12:00AM |
| Updated: | Aug 14 2006 09:45PM |
| Credit: | The vendor disclosed this vulnerability. |
| Vulnerable: |
NetCommons NetCommons 1.0.8 |
| Not Vulnerable: |
NetCommons NetCommons 1.0.9 |
Discussion
NetCommons Unspecified Cross-Site Scripting Vulnerability
NetCommons is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Version 1.0.8 is vulnerable; other versions may also be affected.
NetCommons is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Version 1.0.8 is vulnerable; other versions may also be affected.
Exploit / POC
NetCommons Unspecified Cross-Site Scripting Vulnerability
Attackers can exploit this issue via a web client.
Attackers can exploit this issue via a web client.
Solution / Fix
NetCommons Unspecified Cross-Site Scripting Vulnerability
Solution:
The vendor has released version 1.0.9 to address this issue; please see the reference section for details.
Solution:
The vendor has released version 1.0.9 to address this issue; please see the reference section for details.
References
NetCommons Unspecified Cross-Site Scripting Vulnerability
References:
References:
- NetCommons Home Page (NetCommons)