vendor:
Ninja Blog
by:
indoushka
8,8
CVSS
HIGH
XSS and RFI
79 (XSS) and 98 (RFI)
CWE
Product Name: Ninja Blog
Affected Version From: 4.8
Affected Version To: 4.8
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux
2009
Ninja Blog v4.8 Multiple Vulnerabilities
The Ninja Blog v4.8 is vulnerable to XSS and RFI attacks. An attacker can inject malicious JavaScript code into the vulnerable parameter of the index.php page, which will be executed in the browser of the victim. An attacker can also inject a malicious URL into the vulnerable parameter of the index.php page, which will be executed in the browser of the victim.
Mitigation:
Input validation should be used to prevent XSS and RFI attacks. All user-supplied input should be validated and filtered before being used in the application.
