Open Classifieds Multiple Cross Site Scripting Vulnerabilities.

Bugtraq ID:	43176
Class:	Input Validation Error
CVE:	CVE-2010-3427
Remote:	Yes
Local:	No
Published:	Sep 13 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	r0t
Vulnerable:	Open Classifieds Open Classifieds 1.7 2
Not Vulnerable:

Open Classifieds Multiple Cross Site Scripting Vulnerabilities.

Open Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

Open Classifieds 1.7.0.2 is vulnerable; other versions may also be affected.

Open Classifieds Multiple Cross Site Scripting Vulnerabilities.

Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.

Open Classifieds Multiple Cross Site Scripting Vulnerabilities.

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Open Classifieds Multiple Cross Site Scripting Vulnerabilities.

References:

• Open Classifieds Homepage (Open Classifieds)
  
• Open Classifieds Multiple Vulnerabilities (Moudi)