Nct Jobs Portal Script CVE-2010-1606 Cross-Site Scripting Vulnerability
BID:73737
Info
Nct Jobs Portal Script CVE-2010-1606 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73737 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-1606 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2010 12:00AM |
| Updated: | Apr 29 2010 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Ncrypted Nct Jobs Portal Script 0 |
| Not Vulnerable: | |
Discussion
Nct Jobs Portal Script CVE-2010-1606 Cross-Site Scripting Vulnerability
Nct Jobs Portal Script is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City field.
Nct Jobs Portal Script is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City field.
Exploit / POC
Nct Jobs Portal Script CVE-2010-1606 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Nct Jobs Portal Script CVE-2010-1606 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]