Skunkweb Error Page Cross-Site Scripting Vulnerability
BID:8422
Info
Skunkweb Error Page Cross-Site Scripting Vulnerability
| Bugtraq ID: | 8422 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 14 2003 12:00AM |
| Updated: | Aug 14 2003 12:00AM |
| Credit: | The discovery of this issue has been credited to Jeroen van Dongen. |
| Vulnerable: |
Skunkweb Skunkweb 3.4 b3 Skunkweb Skunkweb 3.4 b2 Skunkweb Skunkweb 3.4 b1 Skunkweb Skunkweb 3.3 |
| Not Vulnerable: | |
Discussion
Skunkweb Error Page Cross-Site Scripting Vulnerability
It has been reported that a cross-site vulnerability that may be exploited via error pages. It is possible that an attacker may construct a malicious link containing HTML and script code that could be executed in a user's browser when the link is visited.
Exploitation of this issue may lead to theft of cookie-based credentials and other attacks.
It has been reported that a cross-site vulnerability that may be exploited via error pages. It is possible that an attacker may construct a malicious link containing HTML and script code that could be executed in a user's browser when the link is visited.
Exploitation of this issue may lead to theft of cookie-based credentials and other attacks.
Exploit / POC
Skunkweb Error Page Cross-Site Scripting Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Skunkweb Error Page Cross-Site Scripting Vulnerability
Solution:
The vendor has released Skunkweb version 3.4b5 to address this issue.
Solution:
The vendor has released Skunkweb version 3.4b5 to address this issue.