Geeklog CVE-2011-5159 Cross-Site Scripting Vulnerability
BID:73883
Info
Geeklog CVE-2011-5159 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73883 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-5159 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 09 2012 12:00AM |
| Updated: | Sep 09 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Geeklog Geeklog 1.3.11 Geeklog Geeklog 1.3.10 Geeklog Geeklog 1.3.9 Geeklog Geeklog 1.3.8 Geeklog Geeklog 1.3.7 Geeklog Geeklog 1.3.5 Geeklog Geeklog 1.7.1 Geeklog Geeklog 1.5.2 Geeklog Geeklog 1.5.1 Geeklog Geeklog 1.5.0 Geeklog Geeklog 1.4.0 Geeklog Geeklog 1.35 Geeklog Geeklog 1.3.6 Geeklog Geeklog 1.3 |
| Not Vulnerable: | |
Discussion
Geeklog CVE-2011-5159 Cross-Site Scripting Vulnerability
Geeklog is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942.
Geeklog is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary web script or HTML via the sub_group parameter, a different vulnerability than CVE-2011-4942.
Exploit / POC
Geeklog CVE-2011-5159 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Geeklog CVE-2011-5159 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]