PT-2002-2731 · Ht://Dig · Ht://Dig

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2010

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ht://Dig versions 3.1.5 through 3.2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the words parameter in the htsearch.cgi component.

Recommendations For versions 3.1.5 through 3.2, avoid using the words parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-2010

Produtos afetados

Ht://Dig

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html · Exploit
• http://iss.net/security_center/static/9433.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2010 · Nota de Segurança
• http://securityfocus.com/bid/5091 · Nota