shiromuku (fs6) DIARY Unspecified Cross Site Scripting Vulnerability

Bugtraq ID:	43603
Class:	Input Validation Error
CVE:	CVE-2009-2565
Remote:	Yes
Local:	No
Published:	Jul 08 2009 12:00AM
Updated:	Sep 30 2010 03:40PM
Credit:	Reported by the vendor.
Vulnerable:
Not Vulnerable:

shiromuku (fs6) DIARY Unspecified Cross Site Scripting Vulnerability

shiromuku (fs6) DIARY is prone to an unspecified cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Shiromuku (fs6) DIARY 2.40 is vulnearble; other versions may be affected.

shiromuku (fs6) DIARY Unspecified Cross Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to visit a malicious URI.

shiromuku (fs6) DIARY Unspecified Cross Site Scripting Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

shiromuku (fs6) DIARY Unspecified Cross Site Scripting Vulnerability

References:

• Shiromuku (fs6) DIARY - Homeapage (shiromuku)
  
• shiromuku (fs6) DIARY, please upgrade to a more available (shiromuku)