PT-2002-1585 · Postboard · Postboard

Publicado 2002-06-11 · Atualizado 2017-07-11 · CVE-2002-0535

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PostBoard versions 2.0.1 and earlier

Description The issue allows remote attackers to execute script as other users. This can be achieved via an [IMG] tag when BBCode is enabled, or in a topic title.

Recommendations For PostBoard versions 2.0.1 and earlier, update to a version later than 2.0.1 to resolve the issue. As a temporary workaround, consider disabling BBCode or restricting the use of [IMG] tags and topic titles to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-0535

Produtos afetados

Postboard

Referências · 8

• 🔥 https://exploit-db.com/exploits/21403 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/267936 · Exploit
• 🔥 http://securityfocus.com/bid/4559 · Exploit
• 🔥 https://exploit-db.com/exploits/21401 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8884 · Nota
• http://securityfocus.com/bid/4561 · Nota
• http://iss.net/security_center/static/8881.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0535 · Nota de Segurança