vendor:
TwonkyMedia Server
by:
Davide Canali
7.5
CVSS
HIGH
Cross-Site Scripting (XSS)
79
CWE
Product Name: TwonkyMedia Server
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Macintosh
2009
TwonkyMedia Server Multiple Cross-Site Scripting Vulnerabilities
TwonkyMedia Server contains multiple Cross-Site Scripting (XSS) vulnerabilities. The TwonkyMedia web server fails to adequately sanitize user input (HTTP request strings and form input); thus, an attacker may be able to execute arbitrary script code in a victim's browser.
Mitigation:
TwonkyMedia has released a new version of the TwonkyMedia Server (version 5.1.2) that fixes the vulnerabilities.
