Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:12848
HistoryMay 27, 2006 - 12:00 a.m.

PHPResidence <= 0.6 XSS

2006-05-2700:00:00
vulners.com
11

PHPResidence <= 0.6 XSS

Discovered by: Nomenumbra
Date: 23/5/2006
impact:moderate (privilege escalation,possible defacement)

PHP Residence software doesn't sanitize any of it's input,
allowing a malicious attacker (providing he/she has an account)
to inject arbitrary HTML or javascript code

Nomenumbra