Kusaba X Multiple Cross Site Scripting Vulnerabilities

Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Kusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities

Kusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47626/info Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Kusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47626/info Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Kusaba X <= 0.9 XSS/CSRF vulnerabilities

========================================== Kusaba X = 0.9 XSS/CSRF vulnerabilities ========================================== Kusaba X suffers XSS and CSRF vulnerabilities that would allow an attacker to take over the web application and possibly the entire server depending on the MySQL...

Kusaba X <= 0.9 XSS/CSRF vulnerabilities

Exploit for unknown platform in category web applications ======================================== Kusaba X . iframes work too The injected script will render and execute when a Moderator or Administrator views the reports. If a Moderator falls victim, the worst case scenario would be cookie...

Kusaba X 0.9 Cross Site Scripting / Cross Site Request Forgery

========================================== Kusaba X . iframes work too The injected script will render and execute when a Moderator or Administrator views the reports. If a Moderator falls victim, the worst case scenario would be cookie stealing followed by session hijacking and account theft. If...