vendor:
Aptgp
by:
indoushka
7.5
CVSS
HIGH
Cross Site Scripting
79
CWE
Product Name: Aptgp
Affected Version From: 1.3.0c
Affected Version To: 1.3.0c
Patch Exists: NO
Related CWE: N/A
CPE: a:aptgp:aptgp:1.3.0c
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2009
Aptgp.v1.3.0c Cross Site Scripting Vulnerability
Aptgp.v1.3.0c is vulnerable to Cross Site Scripting (XSS) attacks. An attacker can inject malicious JavaScript code into the webm_email parameter of the webm_stats.php page. This code will be executed in the browser of the victim when they visit the page. The malicious code can be used to steal the victim's session cookie, allowing the attacker to hijack the user's session.
Mitigation:
Input validation should be used to prevent XSS attacks. All user-supplied input should be validated and filtered before being used in the application. Additionally, output encoding should be used to prevent malicious code from being executed in the browser.
