CVE-2010-3455

CVE-2010-3455 is an XSS vulnerability in AChecker 1.0 . The flaw resides in the code path for index.php where the uri parameter is insufficiently sanitized, allowing remote attackers to inject arbitrary HTML/JavaScript. Demonstrated payloads and exploitation details appear in multiple sources (e....

XSS vulnerability in AChecker

Vulnerability ID: HTB22601 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinachecker.html Product: AChecker Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixe...

CVE-2010-3455: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter...

AChecker 1.0 Cross Site Scripting

Vulnerability ID: HTB22601 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinachecker.html Product: AChecker Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixe...

AChecker 1.0 - URI Cross-Site Scripting

AChecker 1.0 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/43240/info AChecker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

AChecker 1.0 - 'URI' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43240/info AChecker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cross-site Scripting (XSS) Vulnerability in AChecker

High-Tech Bridge SA Security Research Lab has discovered vulnerability in AChecker which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in AChecker: CVE-2010-3455 The vulnerability exists due to input sanitation error in the "uri" parameter in...