header-logo
Suggest Exploit
vendor:
Aardvark Topsites PHP
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: Aardvark Topsites PHP
Affected Version From: 5.2.2000
Affected Version To: 5.2.2000
Patch Exists: YES
Related CWE: N/A
CPE: aardvark_topsites_php
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Aardvark Topsites PHP Cross-Site Scripting Vulnerability

Aardvark Topsites PHP is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/35506/info

Aardvark Topsites PHP is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Aardvark Topsites PHP 5.2.0 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?a=search&q=psstt+securityâ~@~]><a+href%3Dhttp%3A%2F%2Fwebsec.id3as.com>Web-Application-Security

Navigation

Suggest Exploit

Services By CQR