Bugtraq: [myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack

Nmap Security Scanner

Intro

Ref Guide

Install Guide

Download

Changelog

Book

Docs
Security Lists

Bugtraq

Basics

More
Security Tools

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

Bugtraq mailing list archives

[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack

From: addmimistrator () gmail com
Date: 21 Feb 2006 00:52:20 -0000

Hello Everybody
Summary
Software: CuteNews
Sowtwares Web Site: http://cutephp.com
Versions: 1.4.1
Class: Remote
Status: Unpatched
Exploit: Available
Solution: NotAvailable
Discovered by: imei addmimistrator
Risk Level: Mediume&High
-Description-
There is a security bug in CuteNews version 1.4.1 that allows malicious people to perform an XSS attack

Full Advisory:
http://myimei.com/security/2006-02-20/cutenews141addcommentforprotectedusernamesxss-attack.html
greatz to roozbeh afrasiabi:black_death

By Date By Thread

Current thread:

[myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack addmimistrator (Feb 21)