header-logo
Suggest Exploit
vendor:
Sage
by:
SecurityFocus
7.5
CVSS
HIGH
Cross Site Scripting
79
CWE
Product Name: Sage
Affected Version From: 1.2.2001
Affected Version To: 1.2.2001
Patch Exists: YES
Related CWE: N/A
CPE: //a:sage
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

Sage Cross Site Scripting Vulnerability

Sage is prone to a cross site scripting vulnerability due to insufficient sanitization of input submitted in URI parameters. An attacker may create a malicious link to a site hosting Sage, which contains malicious HTML or script code. When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client.

Mitigation:

Input validation should be used to ensure that user-supplied data is properly sanitized.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/6894/info

Sage is prone to a cross site scripting vulnerability.

This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting Sage, which contains malicious HTML or script code.

When such a link is visited by an unsuspecting user, attacker-supplied script code will be interpreted by their web client. 

http://hostname/?mod=<script>alert(document.cookie)</script>&op=browse

Navigation

Suggest Exploit

Services By CQR