Elite CMS Pro Cross Site Scripting and SQL Injection Vulnerabilities
BID:63210
Info
Elite CMS Pro Cross Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 63210 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2013 12:00AM |
| Updated: | Oct 18 2013 12:00AM |
| Credit: | Katharin S. L |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Elite CMS Pro Cross Site Scripting and SQL Injection Vulnerabilities
Elite CMS Pro is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Elite CMS Pro 1.01 is vulnerable; other versions may also be affected.
Elite CMS Pro is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input.
Attackers can exploit these issues to execute arbitrary code in the context of the browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database; other attacks are also possible.
Elite CMS Pro 1.01 is vulnerable; other versions may also be affected.
Solution / Fix
Elite CMS Pro Cross Site Scripting and SQL Injection Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Elite CMS Pro Cross Site Scripting and SQL Injection Vulnerabilities
References:
References: