vendor:
DansGuardian
by:
Unknown
6.1
CVSS
MEDIUM
Cross-Site Scripting
79
CWE
Product Name: DansGuardian
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Unknown
CPE: a:dansguardian_project:dansguardian
Platforms Tested:
Unknown
Cross-Site Scripting in DansGuardian
An attacker can launch a cross-site scripting attack by exploiting a problem in the handling of certain types of input to DansGuardian. This can be done by injecting malicious code into the DENIEDURL parameter of the dansguardian.pl script.
Mitigation:
Update to a patched version of DansGuardian.
