phpMyBible 'index.php' Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	53188
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 15 2012 12:00AM
Updated:	Apr 15 2012 12:00AM
Credit:	G13
Vulnerable:	phpMyBible phpMyBible 0.5.1
Not Vulnerable:

phpMyBible 'index.php' Multiple Cross Site Scripting Vulnerabilities

phpMyBible is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-based authentication credentials. Other attacks are also possible.

phpMyBible 0.5.1 is vulnerable; other versions may also be affected.

phpMyBible 'index.php' Multiple Cross Site Scripting Vulnerabilities

An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

phpMyBible 'index.php' Multiple Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

phpMyBible 'index.php' Multiple Cross Site Scripting Vulnerabilities

References:

• phpMyBible (phpMyBible)
  
• phpMyBible Homepage (phpMyBible)