Lisk CMS CVE-2010-2013 Cross-Site Scripting Vulnerability

Bugtraq ID:	73739
Class:	Input Validation Error
CVE:	CVE-2010-2013
Remote:	Yes
Local:	No
Published:	May 24 2010 12:00AM
Updated:	May 24 2010 12:00AM
Credit:	Unknown
Vulnerable:	Createch-group Lisk CMS 4.4 - Portal%2Fcommu Createch-group Lisk CMS 4.4 - Extranet%2Fint Createch-group Lisk CMS 4.4 - E-Commerce Createch-group Lisk CMS 4.4 - Custom Createch-group Lisk CMS 4.4 - Corporate Createch-group Lisk CMS 4.4
Not Vulnerable:

Lisk CMS CVE-2010-2013 Cross-Site Scripting Vulnerability

Lisk CMS is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in cp/edit_email.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Lisk CMS CVE-2010-2013 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Lisk CMS CVE-2010-2013 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Lisk CMS CVE-2010-2013 Cross-Site Scripting Vulnerability

References:

• SecurityFocus (BUGTRAQ)
  
• XSS vulnerability in LiSK CMS (High-Tech Bridge SA)