Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: CMS / Portals :: b06-1969.htm

Cmscout <= V1.10 multiple XSS attack vectors



Cmscout <= V1.10 multiple XSS attack vectors
Cmscout <= V1.10 multiple XSS attack vectors



Cmscout <= V1.10 multiple XSS attack vectors=0D
Discovered by: Nomenumbra=0D
Date: 5/2/2006=0D
impact:moderate (privilege escalation,possible defacement)=0D
=0D
CMScout is a CMS (Content management system) for scouting related groups from around the world.=0D
A CMS is a piece of web software that makes it easy for you to install, and manage a website.=0D
CMScout includes all the features of other major CMS's that are available (Like PHP-Nuke, Mambo, e107, etc.).=0D
=0D
Added news items and events are properly filtered for potential XSS input, input in the forums and PM's however, is not.=0D
For example, when one would send a pm to the admin like this:=0D
=0D
Subject: whatever=0D
Body: =0D 
=0D
we could obtain the admin's cookie. The inside of BBcode isn't filtered either. This goes for the forums too.=0D
=0D
Nomenumbra/[0x4F4C]=0D


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH