Emweb Wt Multiple Cross Site Scripting and Unspecified Security Vulnerabilities

Bugtraq ID:	38541
Class:	Input Validation Error
CVE:	CVE-2010-1274 CVE-2010-1273
Remote:	Yes
Local:	No
Published:	Mar 04 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Emweb
Vulnerable:	Emweb Wt 3.1
Not Vulnerable:	Emweb Wt 3.1.1

Emweb Wt Multiple Cross Site Scripting and Unspecified Security Vulnerabilities

Emweb Wt is prone to multiple cross-site scripting and unspecified security vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Emweb Wt 3.1.1 are vulnerable.

Emweb Wt Multiple Cross Site Scripting and Unspecified Security Vulnerabilities

Attackers can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Emweb Wt Multiple Cross Site Scripting and Unspecified Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Emweb Wt Multiple Cross Site Scripting and Unspecified Security Vulnerabilities

References:

• Wt Homepage (Emweb)
  
• Emweb Security Advisory: Wt Release notes (Emweb)