header-logo
Suggest Exploit
vendor:
Portrait Campaign Manager
by:
Unknown
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: Portrait Campaign Manager
Affected Version From: 4.6.1.22
Affected Version To: 4.6 SP3
Patch Exists: NO
Related CWE: Unknown
CPE: a:unknown:portrait_campaign_manager:4.6.1.22
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Cross-Site Scripting vulnerabilities in Portrait Campaign Manager

The Portrait Campaign Manager software is prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data. An attacker can exploit these issues by injecting arbitrary script code into the browser of an unsuspecting user, potentially leading to the theft of authentication credentials and the execution of other malicious activities.

Mitigation:

To mitigate these vulnerabilities, it is recommended to apply the latest patches and updates provided by the vendor. Additionally, input validation and sanitization techniques should be implemented to properly handle user-supplied data.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/38252/info

Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Portrait Campaign Manager 4.6.1.22 is vulnerable; other versions prior to 4.6 SP3 may also be affected. 


http://www.example.com/MHCwa/DefaultAn.aspx?LayoutID=<script>alert(&#039;XSS&#039;)</script>

Navigation

Suggest Exploit

Services By CQR