Exploit Database - Logo

MVNForum 1.0 - Search Cross-Site Scripting

EDB-ID: 25438 Author: hoang yen Published: 2005-04-18
CVE: CVE-2005-1183 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: N/A
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/13213/info

mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/mvnforum/Search="><script>alert('XSS found here')</script>
« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2005-1183
Trying to match OSVDBs (1): 16962
Other Possible E-DB Search Terms: MVNForum 1.0,  MVNForum
Date D V Title Author
2006-06-26 Verified MVNForum Activatemember 1.0 - Cross-Site Scriptingr0t
Menu