vendor:
Pinterestclones
by:
SecurityFocus
7,5
CVSS
HIGH
Security Bypass and HTML Injection
79
CWE
Product Name: Pinterestclones
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2013
Pinterestclones Security Bypass and HTML Injection Vulnerabilities
Pinterestclones is prone to a security-bypass vulnerability and an HTML-injection vulnerability because it fails to properly validate user permissions and sanitize user-supplied input. An attacker may leverage the HTML-injection issue to inject hostile HTML and script code that would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. The attacker may leverage the security-bypass issue to bypass certain security restrictions and perform unauthorized actions in the affected application.
Mitigation:
Input validation should be used to ensure that untrusted data is not used to bypass security restrictions. Input validation should also be used to prevent hostile HTML and script code from being injected into the application.
