Wordtrans-web Script Injection Vulnerability
BID:5674
Info
Wordtrans-web Script Injection Vulnerability
| Bugtraq ID: | 5674 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0837 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Discovery credited to Allen Wilson of Guardent, Inc. |
| Vulnerable: |
Wordtrans Wordtrans-web 1.1 pre8 Wordtrans Wordtrans-web 1.0 beta-2-2.4 |
| Not Vulnerable: |
Wordtrans Wordtrans-web 1.1 pre9 Wordtrans Wordtrans-web 1.1 pre10 |
Discussion
Wordtrans-web Script Injection Vulnerability
The Wordtrans-web interface does not properly validate input parameters. This could allow injection of arbitrary HTML, which will be executed by the web client in the context of the Wordstrans-web interface.
The Wordtrans-web interface does not properly validate input parameters. This could allow injection of arbitrary HTML, which will be executed by the web client in the context of the Wordstrans-web interface.
Exploit / POC
Wordtrans-web Script Injection Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Wordtrans-web Script Injection Vulnerability
References:
References: