vendor:
phpWebSite
by:
SecurityFocus
6.4
CVSS
MEDIUM
Cross-Site Scripting
79
CWE
Product Name: phpWebSite
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
phpWebSite Cross-Site Scripting Vulnerability
phpWebSite is prone to cross-site scripting attacks. This vulnerability is due to insufficient sanitization of HTML tags from URI parameters processed by the 'article.php' script. As a result, an attacker may construct a malicious link to this script which contains arbitrary HTML and script code. When the malicious link is visited by a web user, the attacker-supplied code will be executed by their web client in the context of the site hosting the vulnerable software.
Mitigation:
Input validation should be used to ensure that user-supplied data does not contain malicious HTML or script code.
