header-logo
Suggest Exploit
vendor:
212cafeBoard
by:
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: 212cafeBoard
Affected Version From: 0.08 Beta
Affected Version To: 6.30 Beta
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Cross-Site Scripting Vulnerabilities in 212cafeBoard

The application fails to properly sanitize user-supplied input, leading to multiple XSS vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user, potentially stealing authentication credentials and launching further attacks.

Mitigation:

To mitigate these vulnerabilities, it is recommended to sanitize and validate user-supplied input to prevent the execution of arbitrary script code.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/22167/info

212cafeBoard is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect versions 0.08 Beta and 6.30 Beta; other versions may also be affected. 

http://www.example.com/board/search.php?keyword=[XSS]

http://www.example.com/Board/list3.php?user=[XSS]

Navigation

Suggest Exploit

Services By CQR