PT-2003-2143 · E107 · E107

Publicado 2003-10-29 · Atualizado 2017-07-11 · CVE-2003-1191

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions e107 versions 0.554 through 0.603

Description The issue allows remote attackers to cause a denial of service, where pages fail to load, by submitting HTML in the Name field. This prevents the main.php form from being loaded.

Recommendations For versions 0.554 through 0.603, consider validating and sanitizing user input in the Name field to prevent HTML injection and subsequent denial of service. As a temporary workaround, restrict the ability to submit HTML in the Name field until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2003-1191

Produtos afetados

E107

Referências · 9

• 🔥 https://exploit-db.com/exploits/23311 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-10/0313.html · Exploit
• 🔥 http://securityfocus.com/bid/8930 · Exploit
• 🔥 http://osvdb.org/2753 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13553 · Nota
• http://hackingheaven.com/index.php?name=PNphpBB2&file=viewtopic&t=21 · Nota
• http://secunia.com/advisories/10115 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1191 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1191 · Nota