SourceBans Cross-Site Scripting (XSS)

Strike ID:
E15-m1001
CVSS:
4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
False Positive:
t
Variants:
2
Year:
2015

Description

This strike exploits a cross-site scripting vulnerability in SourceBans 1.4.11. The vulnerability is due to improper validation of HTTP request parameters. By exploiting this vulnerability an attacker could execute arbitrary scripts on the target machine.

References