|
B2Evolution Error Pages Multiple Cross-Site Scripting Vulnerabilities
Attackers can exploit these issues via a web client. The following proof-of-concept URIs are available: http://<www.example.com>/<b2epath>/inc/VIEW/errors/_404_not_found.page.php?baseurl=[XSS]&app_name=[XSS] http://<www.example.com>/<b2epath>/inc/VIEW/errors/_410_stats_gone.page.php?app_name=[XSS] http://<www.example.com>/<b2epath>/inc/VIEW/errors/_referer_spam.page.php?ReqURI=[XSS]&app_name=[XSS] |
|
|
Privacy Statement |
