Full Disclosure mailing list archives
[CVE-2013-6239]Contexis 1.0 CMS, Reflected Xss
From: Fran <jfrancisco.bolivar () gmail com>
Date: Wed, 23 Oct 2013 13:38:44 +0200
CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: GET /publicas/galeria-imagenes/Galeria-XXXXX.html?action=detail&image=<XSS code> Solution: update to Contexis 2.0 CMS Credit: This issue was discovered by Juan Francisco Bolivar es.linkedin.com/in/jfbolivar/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6239 -- Un saludo, Juan Francisco
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- [CVE-2013-6239]Contexis 1.0 CMS, Reflected Xss Fran (Oct 24)