vendor:
Forum Livre
by:
ajann
7.5
CVSS
HIGH
Multiple Remote Vulnerabilities
89 (SQL Injection), 79 (XSS)
CWE
Product Name: Forum Livre
Affected Version From: Forum Livre 1.0
Affected Version To: Forum Livre 1.0
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2007
Forum Livre 1.0 Multiple Remote Vulnerabilities
The Forum Livre 1.0 application is vulnerable to SQL injection and cross-site scripting (XSS) attacks. The SQL injection vulnerability can be exploited by modifying the 'user' parameter in the 'info_user.asp' page. The XSS vulnerability can be exploited by injecting malicious code into the 'palavra' parameter in the 'busca2.asp' page.
Mitigation:
To mitigate these vulnerabilities, it is recommended to implement proper input validation and sanitization techniques. Additionally, applying security patches and updates provided by the vendor can help prevent exploitation.
