Cross site scripting

2007-03-0221:18:00

PRIOn knowledge base

www.prio-n.com

AI Score

6.2

Confidence

High

EPSS

0.007

Percentile

80.9%

JSON

Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parameter in (1) news.php and (2) n_layouts.php.

CPENameOperatorVersion
magic_news_pluseq1.0.2

CPE	Name	Operator	Version
	magic_news_plus	eq	1.0.2

References

osvdb.org/33136

osvdb.org/33137

securityreason.com/securityalert/2334

www.securityfocus.com/archive/1/460902/100/0/threaded

www.securityfocus.com/bid/22661