Maroyaka Simple Board CVE-2015-0891 Unspecified Cross Site Scripting Vulnerability
BID:74380
Info
Maroyaka Simple Board CVE-2015-0891 Unspecified Cross Site Scripting Vulnerability
| Bugtraq ID: | 74380 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0891 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 04 2015 12:00AM |
| Updated: | Mar 04 2015 12:00AM |
| Credit: | Shoji Baba |
| Vulnerable: |
Maroyaka CGI Maroyaka Simple Board 1.0 |
| Not Vulnerable: |
Maroyaka CGI Maroyaka Simple Board 1.10a |
Discussion
Maroyaka Simple Board CVE-2015-0891 Unspecified Cross Site Scripting Vulnerability
Maroyaka Simple Board is prone to an unspecified cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Maroyaka Simple Board 1.0 is vulnerable; other versions may also be affected.
Maroyaka Simple Board is prone to an unspecified cross-site scripting vulnerability because it fails to sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Maroyaka Simple Board 1.0 is vulnerable; other versions may also be affected.
Exploit / POC
Maroyaka Simple Board CVE-2015-0891 Unspecified Cross Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user into visiting a specially crafted URL.
An attacker can exploit this issue by enticing an unsuspecting user into visiting a specially crafted URL.