PHP Labs proFile Dir URI Variable Cross-Site Scripting Vulnerability
2014-07-01T00:00:00
ID SSV:79130 Type seebug Reporter Root Modified 2014-07-01T00:00:00
Description
No description provided by source.
source: http://www.securityfocus.com/bid/13276/info
PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's browser in the context of the vulnerable site.
Exploitation could allow theft of cookie-based authentication credentials or other attacks.
http://www.example.com/index.php?act=load&dir=[XSS]
{"lastseen": "2017-11-19T13:43:10", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "cve,poc", "enchantments": {"score": {"value": -0.3, "vector": "NONE", "modified": "2017-11-19T13:43:10", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T13:43:10", "rev": 2}, "vulnersScore": -0.3}, "href": "https://www.seebug.org/vuldb/ssvid-79130", "references": [], "enchantments_done": [], "id": "SSV:79130", "title": "PHP Labs proFile Dir URI Variable Cross-Site Scripting Vulnerability", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 2, "sourceData": "\n source: http://www.securityfocus.com/bid/13276/info\r\n\r\nPHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's browser in the context of the vulnerable site.\r\n\r\nExploitation could allow theft of cookie-based authentication credentials or other attacks. \r\n\r\nhttp://www.example.com/index.php?act=load&dir=[XSS] \n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-79130", "type": "seebug"}