Wheatblog [multiple xss (post) & full path disclosure]

2006.11.16
Risk: Medium
Local: No
Remote: Yes
CWE: N/A

vendor site: http://wheatblog.sourceforge.net/ product : Wheatblog bug: multiple xss (post) & full path disclosure risk : medium xss post : /add_comment.php vulnerable fieds : - Name - WWW - Comment impact: an attacker can steal the cookie from every persons who is watching at the comments. full path disclosure : /index.php?postPtr[]=1&next=1 laurent gaffi & benjamin moss http://s-a-p.ca/ contact: saps.audit (at) gmail (dot) com [email concealed]


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2022, cxsecurity.com

 

Back to Top