Crossday Discuz! 2.0/3.0 Cross Site Scripting Vulnerability
2014-07-01T00:00:00
ID SSV:77403 Type seebug Reporter Root Modified 2014-07-01T00:00:00
Description
No description provided by source.
source: http://www.securityfocus.com/bid/9584/info
It has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful exploitation of this issue, a malicious user could steal cookie based authentication credentials or other information within the context of the affected web page.
[img]http://a.gif');alert(document.cookie);a=escape=('a[/img]
{"href": "https://www.seebug.org/vuldb/ssvid-77403", "status": "cve,poc", "bulletinFamily": "exploit", "modified": "2014-07-01T00:00:00", "title": "Crossday Discuz! 2.0/3.0 Cross Site Scripting Vulnerability", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-77403", "cvelist": [], "description": "No description provided by source.", "viewCount": 2, "published": "2014-07-01T00:00:00", "sourceData": "\n source: http://www.securityfocus.com/bid/9584/info\r\n\r\nIt has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful exploitation of this issue, a malicious user could steal cookie based authentication credentials or other information within the context of the affected web page.\r\n\r\n[img]http://a.gif');alert(document.cookie);a=escape=('a[/img]\n ", "id": "SSV:77403", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T14:48:55", "reporter": "Root", "enchantments": {"score": {"value": -0.4, "vector": "NONE", "modified": "2017-11-19T14:48:55", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T14:48:55", "rev": 2}, "vulnersScore": -0.4}, "references": []}