PHortail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate "pseudo", "email", "ti", and "txt" parameters upon submission to the 'poster.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Public
OSVDB:
Web Related
Solution
OSVDB is not aware of a solution for this vulnerability.
