FuseTalk 4.0 - 'forum/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
| EKU-ID: 35304 | CVE: CVE-2007-3339;OSVDB-37142 | OSVDB-ID: |
| Author: Ivan Almuina | Published: 2007-06-20 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 35304 | CVE: CVE-2007-3339;OSVDB-37142 | OSVDB-ID: |
| Author: Ivan Almuina | Published: 2007-06-20 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other attacks. http://www.example.com/forum/include/common/comfinish.cfm?FTRESULT.errorcode=0&FTVAR_SCRIPTRUN=[xss]