Wiccle Web Builder CVE-2010-3208 Cross-Site Scripting Vulnerability
BID:73636
Info
Wiccle Web Builder CVE-2010-3208 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73636 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3208 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2010 12:00AM |
| Updated: | Sep 03 2010 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Wiccle Wiccle Web Builder 1.00 Wiccle Wiccle Web Builder 1.0.1 |
| Not Vulnerable: | |
Discussion
Wiccle Web Builder CVE-2010-3208 Cross-Site Scripting Vulnerability
Wiccle Web Builder is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php. NOTE: some of these details are obtained from third party information.
Wiccle Web Builder is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php. NOTE: some of these details are obtained from third party information.
Solution / Fix
Wiccle Web Builder CVE-2010-3208 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
References
Wiccle Web Builder CVE-2010-3208 Cross-Site Scripting Vulnerability
References:
References: