BaserCMS Unspecified Cross-Site Scripting Vulnerability
BID:49892
Info
BaserCMS Unspecified Cross-Site Scripting Vulnerability
| Bugtraq ID: | 49892 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-2673 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 30 2011 12:00AM |
| Updated: | Sep 30 2011 12:00AM |
| Credit: | Masako Ohno |
| Vulnerable: |
BaserCMS BaserCMS 1.6.13 1 |
| Not Vulnerable: |
BaserCMS BaserCMS 1.6.13 2 |
Discussion
BaserCMS Unspecified Cross-Site Scripting Vulnerability
BaserCMS is prone to a unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
BaserCMS 1.6.13.1 is vulnerable; prior versions may also be affected.
BaserCMS is prone to a unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
BaserCMS 1.6.13.1 is vulnerable; prior versions may also be affected.
Exploit / POC
BaserCMS Unspecified Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Solution / Fix
BaserCMS Unspecified Cross-Site Scripting Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
BaserCMS Unspecified Cross-Site Scripting Vulnerability
References:
References: