PT-2002-2681 · Cybozu · Cybozu Share 360

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1960

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cybozu Share360 version 1.1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an HTML link. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Cybozu Share360 version 1.1, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.

Correção

Identificadores relacionados

CVE-2002-1960

Produtos afetados

Cybozu Share 360

Referências · 4

• http://share360.com/products/s360/Release_Notes.html · Nota
• http://securityfocus.com/bid/5151 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-1960 · Nota de Segurança
• http://iss.net/security_center/static/9510.php · Correção