Cross site scripting

2009-09-1521:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in LinkorCMS 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the searchstr parameter in a search action; or the (2) nikname, (3) realname, (4) homepage, or (5) city parameter in a registration action.

CPENameOperatorVersion
linkorcmseq1.1
linkorcmsle1.2
linkorcmseq1.2 beta

Name	Operator	Version
linkorcms	eq	1.1
linkorcms	le	1.2
linkorcms	eq	1.2 beta

References

packetstormsecurity.org/0908-exploits/linkorcms-xss.txt

secunia.com/advisories/36487