`New eVuln Advisory:
URL and Title XSS in AxsLinks
http://evuln.com/vulns/139/summary.html
-----------Summary-----------
eVuln ID: EV0139
Software: AxsLinks
Vendor: AXScripts
Version: 0.3
Critical Level: medium
Type: Cross Site Scripting
Status: Unpatched. No reply from developer(s)
PoC: Not available
Not available
Solution: Available
Discovered by: Aliaksandr Hartsuyeu ( http://evuln.com/ )
--------Description--------
User-defined parameters "url" and "title" (script "addlink.php") are not properly sanitized. XSS is possibl.
--------PoC/Exploit--------
1. Exploit code for XSS in URL recip link.
URL recip link: http://valid link/"<XSS>
2. Exploit code for XSS in Link Title.
Link Title: <XSS>
---------Solution----------
Available at http://evuln.com/vulns/139/solution.html
----------Credit-----------
Vulnerability discovered by Aliaksandr Hartsuyeu
http://evuln.com/tool/php-security.html - PHP sources Online Analyzer
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation