OSVDB ID: 17118 Title: YaPiG view.php Multiple Method/Field XSS |
Info |
|
|
Dates |
||||
|
|
Description |
YaPiG contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the phid variable, as well as some unspecified variables, upon submission to the view.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public OSVDB: Web Related |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
Credit |
Unknown or Incomplete |