| EDB-ID: 31335 | Author: Jose Carlos Norte | Published: 2008-03-04 | |
| CVE: CVE-2008-1228 | Type: Webapps | Platform: PHP | |
| Aliases: N/A | Advisory/Source: Link | Tags: Vulnerability | |
E-DB Verified:
 |
Exploit:
 Download
/
View Raw
|
Vulnerable App: N/A | |
source: http://www.securityfocus.com/bid/28098/info MG2 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. http://www.example.com/admin.php?action=import&list=%22%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E
Related Exploits
Trying to match CVEs (1): CVE-2008-1228Trying to match OSVDBs (1): 42741
Other Possible E-DB Search Terms: MG2
| Date | D | V | Title | Author |
|---|---|---|---|---|
| 2008-12-08 | |
|
MG2 0.5.1 - 'filename' Parameter Remote Code Execution | Alfons Luja |
| 2011-02-15 | |
|
MG2 0.5.1 - Multiple Cross-Site Scripting Vulnerabilities | LiquidWorm |
| 2007-10-13 | |
|
KwsPHP 1.0 mg2 Module - SQL Injection | Mehmet Ince |
| 2005-10-29 | |
|
MG2 0.5.1 - Authentication Bypass | Preben Nylo... |
| 2015-10-28 | |
|
Samsung fimg2d - FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw | Google Secu... |
| 2017-04-02 | |
|
Zyxel, EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection | trevor Hough |
| 2009-12-26 | |
|
IMG2ASCII - Cross-Site Scripting | indoushka |