vendor:
PHP Classifieds
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting and Authentication Bypass
79, 287
CWE
Product Name: PHP Classifieds
Affected Version From: 6.2
Affected Version To: 6.2
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
PHP Classifieds Multiple Vulnerabilities
PHP Classifieds is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An attacker may leverage these issues to gain unauthorized access to the affected application and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Mitigation:
Ensure that input is properly sanitized and validated before being used in the application.
