phpWebSite 0.7.3/0.8.2/0.8.3/0.9.2 pagemaster Module PAGE_id Parameter XSS

ID SSV:76801
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.

PHP Website is a web site content management system that allows for easy maintainance and administration of interactive community-driven websites.
Cross-site vulnerabilities have been reported in the Calendar, PageMaster, Search and Fatcat modules that allow an attacker to create a link containing malicious script code that may be rendered in a user's browser when the link is followed.
This would occur in the security context of the site running PHP Website.[PATH]/index.php?
module=pagemaster&PAGE_user_op=view_page&PAGE_id=10">[XSS ATTACK CODE]