vendor:
Ad Network Script
by:
Sid3^effects aKa HaRi
8,8
CVSS
HIGH
Persistent XSS
79
CWE
Product Name: Ad Network Script
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
Ad Network Script Persistent XSS Vulnerability
Ad Network Script is developed in PHP and uses a MySQL database. Ad Network Script allows you to run your own ads network similar to adengage.com or adbrite.com. An attacker can exploit a persistent XSS vulnerability by registering on the website and then navigating to the directory page. On the directory page, the attacker can insert malicious code into the “Ad Text” and “Ad Headline” fields. The malicious code will then be executed when the page is viewed by other users.
Mitigation:
Input validation should be used to prevent malicious code from being inserted into the “Ad Text” and “Ad Headline” fields.
