PT-2002-3136 · Php · Php

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2424

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP(Reactor) version 1.2.7 pl1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag.

Recommendations For PHP(Reactor) version 1.2.7 pl1, consider disabling the use of Javascript in the style attribute of HTML tags until a patch is available. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2002-2424

Produtos afetados

Php

Referências · 5

• 🔥 https://exploit-db.com/exploits/21755 · Exploit
• 🔥 http://securityfocus.com/bid/5569 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0262.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2424 · Nota de Segurança
• http://iss.net/security_center/static/9958.php · Nota