Published: 25/02/2008 Updated: 15/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 455

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote malicious users to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy.

Vulnerable Product	Search on Vulmon	Subscribe to Product
spyce spyce 2.1.3

source: wwwsecurityfocuscom/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may a ...

source: wwwsecurityfocuscom/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may all ...

source: wwwsecurityfocuscom/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow ...

source: wwwsecurityfocuscom/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow t ...

source: wwwsecurityfocuscom/bid/27898/info Spyce is prone to multiple input-validation vulnerabilities that can lead to information disclosure or client-side script execution An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may ...

CWE-79 http://www.procheckup.com/Vulnerability_PR08-01.php http://www.securityfocus.com/bid/27898 http://securityreason.com/securityalert/3699 http://www.securityfocus.com/archive/1/488336/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31268/

CVE-2008-0980

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect