Lucene search

K
exploitdbChris SharpEDB-ID:23320
HistoryOct 31, 2003 - 12:00 a.m.

MLdonkey 2.5-4 - Cross-Site Scripting

2003-10-3100:00:00
Chris Sharp
www.exploit-db.com
15

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/8946/info

It has been reported that the Mldonkey web interface is prone to cross-site scripting attacks when reporting errors. The problem occurs due to insufficient sanitization of script code within requests. This could potentially allow an attacker to carry out a variety of attacks on a user.

http://127.0.0.1:4080/<script>...</script>

AI Score

7.4

Confidence

Low

Related for EDB-ID:23320