Doika Guestbook GBook.PHP HTML Injection Vulnerability
BID:19656
CVE-2006-4325 |Info
Doika Guestbook GBook.PHP HTML Injection Vulnerability
| Bugtraq ID: | 19656 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 22 2006 12:00AM |
| Updated: | Aug 30 2006 08:33PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of this vulnerability. |
| Vulnerable: |
Doika Guestbook 2.5 |
| Not Vulnerable: | |
Discussion
Doika Guestbook GBook.PHP HTML Injection Vulnerability
Doika Guestbook is prone to an HTML-injection vulnerability. An attacker may inject hostile HTML and script code into vulnerable sections of the application. When viewed, this code may be rendered in the browser of a user visiting the site in the context of the affected website.
Doika Guestbook is prone to an HTML-injection vulnerability. An attacker may inject hostile HTML and script code into vulnerable sections of the application. When viewed, this code may be rendered in the browser of a user visiting the site in the context of the affected website.
Exploit / POC
Doika Guestbook GBook.PHP HTML Injection Vulnerability
An attacker can exploit this issue using a web client.
An attacker can exploit this issue using a web client.
Solution / Fix
Doika Guestbook GBook.PHP HTML Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].