PT-2003-2160 · Maxwebportal · Maxwebportal

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1212

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MaxWebPortal version 1.30

Description The issue allows remote attackers to perform unauthorized actions by modifying hidden form fields in the 'start new topic' HTML page, specifically the news, lock, or allmem fields.

Recommendations For MaxWebPortal version 1.30, consider restricting access to the 'start new topic' HTML page or validating user input to prevent modification of hidden form fields until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1212

Produtos afetados

Maxwebportal

Referências · 6

• 🔥 http://secunia.com/advisories/8979 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2003-06/0048.html · Correção
• http://osvdb.org/4933 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12278 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1212 · Nota de Segurança
• http://securityfocus.com/bid/7837 · Correção