vendor:
ChatBoard
by:
HaHwul
7,5
CVSS
HIGH
Stored XSS
79
CWE
Product Name: ChatBoard
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Debian [wheezy]
2016
Ultrabenosaurus ChatBoard – Stored XSS
chat.php is not filtering special character, allowing an attacker to inject malicious JavaScript code into the application, which is then stored in the database and executed when other users view the page.
Mitigation:
Input validation should be used to prevent malicious code from being stored in the application.
