header-logo
Suggest Exploit
vendor:
DDL CMS
by:
Not provided
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: DDL CMS
Affected Version From: 2.1
Affected Version To: Not provided
Patch Exists: NO
Related CWE: Not provided
CPE: Not provided
Metasploit:
Other Scripts:
Platforms Tested: Not provided
Not provided

DDL CMS Cross-Site Scripting Vulnerability

DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Mitigation:

To mitigate this vulnerability, it is recommended to implement input validation and sanitization mechanisms to ensure that user-supplied input is properly sanitized and does not contain any malicious code.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/38643/info

DDL CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

DDL CMS 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/ddl/blacklist.php?site_name=[XSS]

Navigation

Suggest Exploit

Services By CQR