PT-2002-2446 · Php · Phpimageview

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1724

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPImageView version 1.0

Description A cross-site scripting issue exists, allowing remote attackers to execute arbitrary scripts as other users. This is achieved via the pic parameter in the phpimageview.php file.

Recommendations For PHPImageView version 1.0, consider restricting access to the phpimageview.php file until a patch is available, and avoid using the pic parameter in sensitive operations to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1724

Produtos afetados

Phpimageview

Referências · 5

• http://online.securityfocus.com/archive/82/270970 · Nota
• http://securityfocus.com/bid/4668 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1724 · Nota de Segurança
• http://ifrance.com/kitetoua/tuto/5holes4.txt · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9000 · Nota