header-logo
Suggest Exploit
vendor:
Clustering Engine
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: Clustering Engine
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

Vivisimo Clustering Engine Cross-Site Scripting Vulnerability

Vivisimo Clustering Engine is prone to a cross-site scripting vulnerability due to insufficient sanitization of parameters passed to the search script. An attacker may be able to construct a link designed to execute arbitrary script code within the browser of a user who follows it.

Mitigation:

Input validation should be used to ensure that untrusted data is not passed to the search script.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/8862/info

Vivisimo Clustering Engine reported prone to cross-site scripting vulnerability. The problem occurs due to insufficient sanitization of parameters passed to the search script. As a result, an attacker may be capable of constructing a link designed to execute arbitrary script code within the browser of a user who follows it.

http://www.example.com/search?query=<script>alert(document.domain)</script>

Navigation

Suggest Exploit

Services By CQR