Samswhois CVE-2011-5193 Cross-Site Scripting Vulnerability
BID:73878
Info
Samswhois CVE-2011-5193 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73878 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-5193 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 23 2012 12:00AM |
| Updated: | Sep 23 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Phpace Samswhois 1.4.2.3 Phpace Samswhois 1.1 |
| Not Vulnerable: | |
Discussion
Samswhois CVE-2011-5193 Cross-Site Scripting Vulnerability
Samswhois is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than CVE-2011-5194.
Samswhois is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than CVE-2011-5194.
Exploit / POC
Samswhois CVE-2011-5193 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Samswhois CVE-2011-5193 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]