Vanilla Cross Site Scripting and Authentication Bypass Vulnerabilities
BID:46454
Info
Vanilla Cross Site Scripting and Authentication Bypass Vulnerabilities
| Bugtraq ID: | 46454 |
| Class: | Unknown |
| CVE: |
CVE-2011-0909 CVE-2011-0910 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2011 12:00AM |
| Updated: | Jan 26 2011 12:00AM |
| Credit: | Vanilla |
| Vulnerable: |
Vanilla Forums Vanilla 2.0.16 Vanilla Forums Vanilla 2.0.17.5 Vanilla Forums Vanilla 2.0.17.4 Vanilla Forums Vanilla 2.0.17.3 |
| Not Vulnerable: |
Vanilla Forums Vanilla 2.0.17.6 |
Exploit / POC
Vanilla Cross Site Scripting and Authentication Bypass Vulnerabilities
An attacker can exploit these issues using a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim into following a malicious URI.
An attacker can exploit these issues using a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Vanilla Cross Site Scripting and Authentication Bypass Vulnerabilities
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
Vanilla Cross Site Scripting and Authentication Bypass Vulnerabilities
References:
References: