ID de Prueba:	1.3.6.1.4.1.25623.1.0.103669
Categoría:	Web application abuses
Título:	CometChat RCE and XSS Vulnerabilities
Resumen:	CometChat is prone to a cross-site scripting (XSS) vulnerability and a; remote code execution (RCE) vulnerability because the application fails to sufficiently sanitize; user-supplied data.
Descripción:	Summary: CometChat is prone to a cross-site scripting (XSS) vulnerability and a remote code execution (RCE) vulnerability because the application fails to sufficiently sanitize user-supplied data. Vulnerability Impact: An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. An attacker can exploit the remote code-execution issue to execute arbitrary code in the context of the application. Failed attacks may cause denial-of-service conditions. Solution: Updates are available. Please see the references or vendor advisory for more information. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:P/A:P
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.