Cachelogic Expired Domains Script Cross Site Scripting and SQL Injection Vulnerabilities
18 Jul. 2012
Summary
Cachelogic Expire Domains Script is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Cachelogic Expire Domains Script versions V.1 and prior are vulnerable.
Vendor Status:
Currently we are not aware of any vendor-supplied patches
