Published: 04/01/2010 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in ViArt CMS 3.x allow remote malicious users to inject arbitrary web script or HTML via the (1) category_id parameter to forums.php, or the forum_id parameter to (2) forum.php or (3) forum_topic_new.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
viart viart cms 3.3.2

source: wwwsecurityfocuscom/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based auth ...

source: wwwsecurityfocuscom/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authen ...

source: wwwsecurityfocuscom/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authenti ...

CWE-79 http://packetstormsecurity.org/0908-exploits/viartcms-xss.txt http://secunia.com/advisories/36241 http://www.securityfocus.com/bid/36003 http://osvdb.org/56884 http://osvdb.org/56885 http://osvdb.org/56883 https://exchange.xforce.ibmcloud.com/vulnerabilities/52371 https://nvd.nist.gov https://www.exploit-db.com/exploits/33158/

CVE-2009-4547

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect