[eVuln] CJ Tag Board XSS Vulnerability Sep 12 2006 05:02PM
Alex (alex evuln com)
New eVuln Advisory:
CJ Tag Board XSS Vulnerability

eVuln ID: EV0137
Vendor: CloudNine Interactive
Vendor's Web Site: http://www.cloudnineinteractive.co.uk/
Software: Tag Board
Sowtware's Web Site:
Versions: 3.0
Critical Level: Harmless
Type: Cross-Site Scripting
Class: Remote
Status: Unpatched. No reply from developer(s)
PoC/Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Cross-Site Scripting.

Vulnerable Script: tag.php

Parameter cjmsg is not properly sanitized. This can be used to post
arbitrary HTML or web script code.

Available at: http://evuln.com/vulns/137/exploit.html

No Patch available.

Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus