PT-2002-1753 · Myguestbook · Myguestbook

CVE-2002-0732 · Publicado 2002-07-26 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyGuestbook version 1.0

Description A cross-site scripting issue allows remote attackers to execute arbitrary script or inject HTML via fields such as user name or comments.

Recommendations For MyGuestbook version 1.0, consider validating and sanitizing user input in fields like user name and comments to prevent code injection. As a temporary workaround, restrict access to these fields until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-0732

Produtos afetados

Myguestbook

Referências · 6

• 🔥 https://exploit-db.com/exploits/21433 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-04/0422.html · Exploit
• 🔥 http://securityfocus.com/bid/4651 · Exploit
• http://levcgi.com/programs.cgi?program=myguestbook&action=history · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0732 · Nota de Segurança
• http://iss.net/security_center/static/8968.php · Aviso do Fabricante