phpWhois (last update Jun 30 2021) is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is a XSS vulnerability.
References
Link | Resource |
---|---|
https://github.com/sparc/phpWhois.org/issues/21 | Exploit Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-11-29T11:33:36
Updated: 2021-12-01T11:43:58
Reserved: 2021-11-15T00:00:00
Link: CVE-2021-43698
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-11-29T12:15:08.217
Modified: 2021-12-01T15:15:54.023
Link: CVE-2021-43698
JSON object: View
Redhat Information
No data.
CWE