OSVDB ID: 25430 Title: Jadu CMS register.php Multiple Parameter XSS |
Info |
|
|
Dates |
||||
|
|
Description |
Jadu CMS has been reported to contain a cross-site scripting issue in the register.php script. After extensive dialogue with the vendor, Jadu Ltd., it has been determined that the affected script is not part of the Jadu CMS distribution. The affected script was utilized on a handful of customer sites but did not affect a site based on the use of Jadu CMS. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity OSVDB: Web Related, Myth / Fake |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Jadu, Ltd. has released a patch to address this vulnerability. The patch only applies to a limited number of their customer base that used a customized version of a register.php script. |
Products |
|
References |
|
Credit |
|