PHP Arena PAFileDB Rate File Cross-Site Scripting Vulnerability
BID:6019
Info
PHP Arena PAFileDB Rate File Cross-Site Scripting Vulnerability
| Bugtraq ID: | 6019 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 21 2002 12:00AM |
| Updated: | Oct 21 2002 12:00AM |
| Credit: | Discovery of this issue is credited to <[email protected]>. |
| Vulnerable: |
PHP Arena paFileDB 3.0 PHP Arena paFileDB 2.1.1 PHP Arena paFileDB 1.1.3 |
| Not Vulnerable: | |
Discussion
PHP Arena PAFileDB Rate File Cross-Site Scripting Vulnerability
PHP Arena paFileDB is prone to cross-site scripting attacks.
An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will execute in their web client in the security context of the paFileDB site.
This issue is in the "Rate File" function of the paFileDB script.
PHP Arena paFileDB is prone to cross-site scripting attacks.
An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code will execute in their web client in the security context of the paFileDB site.
This issue is in the "Rate File" function of the paFileDB script.
Solution / Fix
PHP Arena PAFileDB Rate File Cross-Site Scripting Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.