PT-2019-7156 · Bilboplanet · Bilboplanet
Published
2019-05-15
·
Updated
2019-05-15
·
CVE-2014-9918
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Bilboplanet version 2.0
Description
A stored XSS issue exists due to the
user id parameter in the "signup.php" endpoint.Recommendations
For Bilboplanet version 2.0, consider restricting access to the vulnerable
signup.php endpoint until a patch is available, and avoid using the user id parameter in this endpoint to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bilboplanet