Categories

Applications (222)
Blogs (7)
Content Management (148)
Customer Relationship (2)
Discussion Boards (29)
E-Commerce (14)
General Purpose Directories (2)
Image Galleries (18)
Mailing Lists (1)
Tips (3)
Vulnerabilities (337)
Access Bypass (50)
Cross Site Scripting (123)
Denial Of Service (2)
File Inclusion (51)
Information Disclosure (15)
Privilege Escalation (2)
Remote Command Execution (16)
Session Hijacking (2)
SQL Injection (130)
« WordPress Sniplets Plugin Multiple Vulnerabilities
Xoops XM-Memberstats Module SQL Injection »

Plume CMS “dir” XSS

Published by TL Guan March 20th, 2008 in Content Management and Cross Site Scripting.

Application: Plume CMS
Affected Version: 1.2.2 and other versions.
Vendor’s URL: http://www.plume-cms.net/
Bug Type: Cross Site Scripting
Risk Level: Medium

Solution:
Edit the source code to ensure that input is properly sanitized.

0 Responses to “Plume CMS “dir” XSS”

Feed for this Entry Trackback Address
  1. No Comments

Leave a Reply

You must login to post a comment.

« WordPress Sniplets Plugin Multiple Vulnerabilities
Xoops XM-Memberstats Module SQL Injection »

Subscribe

Latest

Archives



Valid XHTML 1.0 Transitional