vendor:
ArticleLive
by:
indoushka
7.5
CVSS
HIGH
Cross Site Scripting
79
CWE
Product Name: ArticleLive
Affected Version From: 2005.0.0
Affected Version To: 2005.0.0
Patch Exists: NO
Related CWE: N/A
CPE: a:interspire:articlelive:2005.0.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2005
ArticleLive PHP Version 2005.0.0 Cross Site Scripting Vulnerability
ArticleLive PHP Version 2005.0.0 is vulnerable to Cross Site Scripting. An attacker can inject malicious JavaScript code in the username and password fields of the login page. This malicious code will be executed in the browser of the victim when they visit the vulnerable page.
Mitigation:
Input validation should be used to prevent malicious code from being injected into the application.
