• info
• discussion
• exploit
• solution
• references

SineCms result.PHP Cross Site Scripting Vulnerability

SineCms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks.

This issue affects SineCms 2.3.4; other versions may also be affected.