Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Article Dashboard Multiple Input Validation Vulnerabilities

Article Dashboard is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability.

A successful exploit may allow an attacker to steal cookie-based authentication credentials, execute malicious script code in a user's browser, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

These vulnerabilities were found in a version of Article Dashboard that was downloaded from the vendor's site on July 25, 2007. Presumably, all versions of Article Dashboard are vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus