Comsenz SupeSite CMS 'title' Field HTML Injection Vulnerability
BID:74242
Info
Comsenz SupeSite CMS 'title' Field HTML Injection Vulnerability
| Bugtraq ID: | 74242 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 15 2015 12:00AM |
| Updated: | Apr 15 2015 12:00AM |
| Credit: | Wang Jing |
| Vulnerable: |
Comsenz SupeSite 7.0 Comsenz SupeSite 6.0.1UC |
| Not Vulnerable: | |
Discussion
Comsenz SupeSite CMS 'title' Field HTML Injection Vulnerability
Comsenz SupeSite CMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Comsenz SupeSite CMS 6.0.1UC and 7.0 are vulnerable; other versions may also be affected.
Comsenz SupeSite CMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Comsenz SupeSite CMS 6.0.1UC and 7.0 are vulnerable; other versions may also be affected.
References
Comsenz SupeSite CMS 'title' Field HTML Injection Vulnerability
References:
References:
- Comsenz SupeSite CMS 7.0 Stored XSS (Cross-site Scripting) Security Vulnerabilit (Information Security)
- Supersite Homepage (Comsenz)