PHPValley Micro Jobs Site Script Spoofing Vulnerability

Bugtraq ID:	59536
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2013 12:00AM
Updated:	Apr 27 2013 12:00AM
Credit:	Jason Whelan
Vulnerable:	PHPValley PHPValley Micro Jobs Site Script 1.01
Not Vulnerable:

PHPValley Micro Jobs Site Script Spoofing Vulnerability

PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user.

Attackers can exploit this issue to spoof another user; other attacks are also possible.

PHPValley Micro Jobs Site Script 1.01 is vulnerable; other versions may also be affected.

PHPValley Micro Jobs Site Script Spoofing Vulnerability

Attackers can exploit this issue through a web browser.

The following example input is available:

• /data/vulnerabilities/exploits/59536.html.txt

PHPValley Micro Jobs Site Script Spoofing Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHPValley Micro Jobs Site Script Spoofing Vulnerability

References:

• PHPValley Micro Jobs Script Homepage (PHPValley)