b2evolution _404_not_found.page.php Multiple Variable XSS

2006-11-28T08:48:48
ID OSVDB:30778
Type osvdb
Reporter tarkus(tarkus@tiifp.org)
Modified 2006-11-28T08:48:48

Description

Manual Testing Notes

http://[target]/<b2epath>/inc/VIEW/errors/_404_not_found.page.php?baseurl=[XSS]&app_name=[XSS]

References:

Vendor URL: http://b2evolution.net/ Secunia Advisory ID:23148 Related OSVDB ID: 30779 Related OSVDB ID: 30780 Other Advisory URL: https://tiifp.org/tarkus/advisories/b2evolution111106_02.txt ISS X-Force ID: 30562 CVE-2006-6197 Bugtraq ID: 21334