Exploit Database - Logo

Digital Hive 2.0 - 'base.php' Cross-Site Scripting

EDB-ID: 31701 Author: ZoRLu Published: 2008-04-24
CVE: CVE-2008-1985 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: Link Tags: N/A
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: Download Vulnerable Application
« Previous Exploit Next Exploit » 
source: http://www.securityfocus.com/bid/28918/info

Digital Hive is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Digital Hive 2.0 RC2 is vulnerable; other versions may also be affected.

http://www.example.com/a/hive_v2.RC2/base.php?page=membres.php&mt=[XSS]
« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2008-1985
Trying to match OSVDBs (1): 44759
Trying to match setup file: 6c674c8eb95257d4344b699165677e7a
Other Possible E-DB Search Terms: Digital Hive 2.0,  Digital Hive
Date D V Title Author
2009-12-14 Verified Digital Hive - Multiple VulnerabilitiesViRuSMaN
2006-10-15 Verified DigitalHive 2.0 RC2 - 'base_include.php' Remote File InclusionSHiKaA
2008-01-11 Verified DigitalHive 2.0 RC2 - 'user_id' SQL Injectionj0j0
2008-05-16 Verified Digital Hive 2.0 - 'base_include.php' Local File InclusionZoRLu
Menu