Sosci Survey Multiple Security Vulnerabilities

ID EDB-ID:38478
Type exploitdb
Reporter T. Lazauninkas
Modified 2013-04-17T00:00:00


Sosci Survey Multiple Security Vulnerabilities. Webapps exploit for php platform


Sosci Survey is prone to following security vulnerabilities:

1. An unauthorized-access vulnerability
2. Multiple cross-site scripting vulnerabilities
3. Multiple HTML-injection vulnerabilities
4. A PHP code-execution vulnerability

Successful exploits may allow an attacker to gain unauthorized access to the affected application, allow attacker-supplied HTML and script code to run in the context of the affected browser, allow the attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or inject and execute arbitrary malicious PHP code in the context of the web server process.[msg_id]<script>alert(document.cookie)</script>