Skip to content

J-Security Center

Latest Attack Object Updates
  • IDP Daily Update #1312
    posted: 11/18/08
  • NSM Daily Update #1312
    posted: 11/18/08
  • Deep Inspection 5.3r5 and above, 5.4, 6.0 #1312
    posted: 11/18/08
  • Deep Inspection 5.1, 5.2, 5.3r4 and below #1300
    posted: 11/18/08
  • Deep Inspection 5.0 #1132
    posted: 04/01/08
  • Antivirus
    posted: 11/17/08

Title: Liens_Dynamiques Multiple Unspecified Cross Site Scripting Vulnerabilities

Severity: MODERATE

Description:

The 'liens_dynamiques' program is a web application implemented in PHP.

The application is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

These issues affect multiple, unspecified scripts and parameters.

An attacker could exploit these vulnerabilities to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

These issues affect version 2.1; other versions may also be affected.

Affected Products:

  • liens_dynamiques liens_dynamiques 2.1

References: