header-logo
Suggest Exploit
vendor:
by:
5.5
CVSS
MEDIUM
HTML Injection
79
CWE
Product Name:
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

HTML Injection in Gbplus

Gbplus is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Mitigation:

To mitigate this vulnerability, proper input validation and sanitization techniques should be implemented to ensure that user-supplied input is properly sanitized before being used in dynamically generated content.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/42842/info

Gbplus is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible. 


Inject the following data into the vulnerable fields:

<meta http-equiv="refresh" content="0;url=http://www.example.com/" />

Navigation

Suggest Exploit

Services By CQR