vfront Multiple Security Vulnerabilities
BID:74952
Info
vfront Multiple Security Vulnerabilities
| Bugtraq ID: | 74952 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2015 12:00AM |
| Updated: | Jun 02 2015 12:00AM |
| Credit: | John Page ( hyp3rlinx ) |
| Vulnerable: |
VFront VFront 0.99.2 |
| Not Vulnerable: | |
Discussion
vfront Multiple Security Vulnerabilities
vfront is prone to the following security vulnerabilities:
1. Multiple cross-site scripting vulnerabilities
2. An HTML-injection vulnerability
3. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, execute attacker-supplied HTML or JavaScript code in the context of the affected site or to steal cookie-based authentication credentials. This may aid in further attacks.
vfront 0.99.2 is vulnerable; other versions may also be affected.
vfront is prone to the following security vulnerabilities:
1. Multiple cross-site scripting vulnerabilities
2. An HTML-injection vulnerability
3. A cross-site request forgery vulnerability
An attacker can exploit these issues to perform unauthorized actions, execute attacker-supplied HTML or JavaScript code in the context of the affected site or to steal cookie-based authentication credentials. This may aid in further attacks.
vfront 0.99.2 is vulnerable; other versions may also be affected.
Exploit / POC
vfront Multiple Security Vulnerabilities
Attackers can exploit this issue using a browser or readily available tools.
Attackers can exploit this issue using a browser or readily available tools.
Solution / Fix
vfront Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].