PT-2002-2529 · Phpwebsite · Phpwebsite

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1807

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpWebSite version 0.8.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag, which can lead to cross-site scripting (XSS) attacks.

Recommendations For phpWebSite version 0.8.3, consider disabling the ability to inject Javascript in IMG tags until a patch is available. Restrict access to areas where user-inputted HTML is processed to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1807

Produtos afetados

Phpwebsite

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html · Exploit
• 🔥 http://securityfocus.com/bid/5802 · Exploit
• http://iss.net/security_center/static/10173.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1807 · Nota de Segurança