vendor:
Snif
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: Snif
Affected Version From: 1.2.2006
Affected Version To: 1.2.2006
Patch Exists: YES
Related CWE: N/A
CPE: a:bitfolge:snif
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
Bitfolge Snif Cross-Site Scripting Vulnerability
Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the attacker-supplied code may render in their web browser in the context of the site.
Mitigation:
Input validation should be used to ensure that user-supplied data does not contain malicious HTML or script code.
