|
ShoutLIVE Multiple Input Validation Vulnerabilities
ShoutLIVE is prone to multiple input-validation vulnerabilities. The application fails to properly sanitize user-supplied input. Attacker-supplied PHP script code can be executed in the context of the affected webserver, facilitating the compromise of the hosting computer. Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible. ShoutLIVE version 1.1.0 is vulnerable to these issues; other versions may also be affected. |
|
|
Privacy Statement |
