vendor:
ArticleSetup
by:
DevilScreaM
8,8
CVSS
HIGH
Cross Site Scripting, SQL Injection
79 (Cross-site Scripting), 89 (SQL Injection)
CWE
Product Name: ArticleSetup
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7, Ubuntu (Mozila & Chrome)
2013
ArticleSetup Multiple Vulnerabilities
Cross Site Scripting: An attacker can inject malicious JavaScript code into the search.php page of the vulnerable application. SQL Injection: An attacker can inject malicious SQL queries into the feed.php and search.php pages of the vulnerable application.
Mitigation:
Input validation, parameterized queries, and proper encoding should be used to prevent Cross Site Scripting and SQL Injection vulnerabilities.
