Cross-Site Scripting Vulnerability in i-Net Solution Orkut Clone
CVE-2008-5971

Currently unrated

Key Information:

Vendor: I-netsolution
Status: Orkut Clone
Vendor: CVE Published:; 27 January 2009

🔔 Create I-netsolution Vulnerability Alert

What is CVE-2008-5971?

A cross-site scripting (XSS) vulnerability exists in the profile_social.php file of i-Net Solution’s Orkut Clone. This flaw allows remote authenticated users to inject arbitrary web scripts or HTML into pages viewed by other users, potentially leading to unauthorized actions and data exposure. Attackers can exploit this vulnerability by manipulating the 'id' parameter in a request, making it essential for users to ensure they are using an updated version of the product and adhere to proper security measures.

References

http://secunia.com/advisories/32937

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/32600

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/47014

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 27, 2009
Vulnerability Reserved
Jan 26, 2009

CVE-2008-5971 Data

JSON