header-logo
Suggest Exploit
vendor:
acWEB
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: acWEB
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

acWEB Cross-Site Scripting Vulnerability

acWEB is vulnerable to Cross-Site Scripting attacks. An attacker can construct a malicious link containing arbitrary script code and send it to a victim. When the victim visits the link, the script code will be executed in the context of the webserver.

Mitigation:

To mitigate Cross-Site Scripting attacks, input validation should be performed on all user-supplied data.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5793/info

acWEB is prone to cross-site scripting attacks. It is possible to construct a malicious link to the web server which contains arbitrary script code. When the link is visited, the script code will be executed in the web client of the user visiting the link. The code will be executed in the context of the webserver. 

http://www.victim.com/%db<script>alert('test');</script>/

Navigation

Suggest Exploit

Services By CQR