vendor:
Siteframe Beaumont
by:
SecurityFocus
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: Siteframe Beaumont
Affected Version From: 5.0.1
Affected Version To: Prior Versions
Patch Exists: NO
Related CWE: N/A
CPE: a:siteframe:siteframe_beaumont
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Siteframe Beaumont Cross-Site Scripting Vulnerability
Siteframe Beaumont is prone to a cross-site scripting vulnerability. This issue affects the 'search.php' script. An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI. The malicious URI contains a specially crafted string that, when viewed, will execute arbitrary HTML and script code in the user's browser in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Mitigation:
Users should avoid following unsolicited links from untrusted sources. Administrators should disable the 'search.php' script or filter user-supplied input for malicious code.
