Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webgui | Plain_black | 5.5.8 (including) | 5.5.8 (including) |
| Webgui | Plain_black | 6.2.10_gamma (including) | 6.2.10_gamma (including) |
| Webgui | Plain_black | 6.2.11_gamma (including) | 6.2.11_gamma (including) |
| Webgui | Plain_black | 6.3.0_beta (including) | 6.3.0_beta (including) |
| Webgui | Plain_black | 6.4.0_beta (including) | 6.4.0_beta (including) |
| Webgui | Plain_black | 6.5.0_beta (including) | 6.5.0_beta (including) |
| Webgui | Plain_black | 6.5.1_beta (including) | 6.5.1_beta (including) |
| Webgui | Plain_black | 6.5.2_beta (including) | 6.5.2_beta (including) |
| Webgui | Plain_black | 6.5.3_beta (including) | 6.5.3_beta (including) |
| Webgui | Plain_black | 6.5.4_gamma (including) | 6.5.4_gamma (including) |
| Webgui | Plain_black | 6.5.5_gamma (including) | 6.5.5_gamma (including) |
| Webgui | Plain_black | 6.5.6_gamma (including) | 6.5.6_gamma (including) |
| Webgui | Plain_black | 6.6.0_beta (including) | 6.6.0_beta (including) |
| Webgui | Plain_black | 6.6.1_beta (including) | 6.6.1_beta (including) |
| Webgui | Plain_black | 6.6.2_gamma (including) | 6.6.2_gamma (including) |
| Webgui | Plain_black | 6.6.3_gamma (including) | 6.6.3_gamma (including) |
| Webgui | Plain_black | 6.6.4_gamma (including) | 6.6.4_gamma (including) |
| Webgui | Plain_black | 6.6.5 (including) | 6.6.5 (including) |
| Webgui | Plain_black | 6.7.0_beta (including) | 6.7.0_beta (including) |
| Webgui | Plain_black | 6.7.1_beta (including) | 6.7.1_beta (including) |
| Webgui | Plain_black | 6.7.2_beta (including) | 6.7.2_beta (including) |
| Webgui | Plain_black | 6.7.3_gamma (including) | 6.7.3_gamma (including) |
| Webgui | Plain_black | 6.7.4_gamma (including) | 6.7.4_gamma (including) |
| Webgui | Plain_black | 6.7.5_gamma (including) | 6.7.5_gamma (including) |
| Webgui | Plain_black | 6.7.6_gamma (including) | 6.7.6_gamma (including) |
| Webgui | Plain_black | 6.7.7_gamma (including) | 6.7.7_gamma (including) |
| Webgui | Plain_black | 6.7.8_gamma (including) | 6.7.8_gamma (including) |
| Webgui | Plain_black | 6.8.1_beta (including) | 6.8.1_beta (including) |
| Webgui | Plain_black | 6.8.2_beta (including) | 6.8.2_beta (including) |
| Webgui | Plain_black | 6.8.3_gamma (including) | 6.8.3_gamma (including) |
References
- http://secunia.com/advisories/18372
- http://sourceforge.net/project/shownotes.php?release_id=384153\u0026group_id=51417
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1395371\u0026group_id=51417\u0026atid=463213
- http://www.vupen.com/english/advisories/2006/0126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24053
- http://secunia.com/advisories/18372
- http://sourceforge.net/project/shownotes.php?release_id=384153\u0026group_id=51417
- http://sourceforge.net/tracker/index.php?func=detail\u0026aid=1395371\u0026group_id=51417\u0026atid=463213
- http://www.vupen.com/english/advisories/2006/0126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24053