source: http://www.securityfocus.com/bid/28918/info Digital Hive is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. Digital Hive 2.0 RC2 is vulnerable; other versions may also be affected. http://www.example.com/a/hive_v2.RC2/base.php?page=membres.php&mt=[XSS]
Related Exploits
Trying to match CVEs (1): CVE-2008-1985Trying to match OSVDBs (1): 44759
Trying to match setup file: 6c674c8eb95257d4344b699165677e7a
Other Possible E-DB Search Terms: Digital Hive 2.0, Digital Hive
| Date | D | V | Title | Author |
|---|---|---|---|---|
| 2009-12-14 |  |
|
Digital Hive - Multiple Vulnerabilities | ViRuSMaN |
| 2006-10-15 | |
|
DigitalHive 2.0 RC2 - 'base_include.php' Remote File Inclusion | SHiKaA |
| 2008-01-11 | |
|
DigitalHive 2.0 RC2 - 'user_id' Parameter SQL Injection | j0j0 |
| 2008-05-16 | |
|
Digital Hive 2.0 - 'base_include.php' Local File Inclusion | ZoRLu |