PT-2003-2183 · Nuked Klan · Nuked-Klan

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1238

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Nuked-Klan versions 1.3 beta and earlier

Description A cross-site scripting issue allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into the top of the Team, News, and Liens modules.

Recommendations For versions 1.3 beta and earlier, update to a version later than 1.3 beta to resolve the issue. As a temporary workaround, consider restricting access to the Team, News, and Liens modules until a patch is available. Avoid using these modules with untrusted input until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2003-1238

Produtos afetados

Nuked-Klan

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html · Exploit
• 🔥 http://securityfocus.com/bid/6916 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html · Exploit
• http://iss.net/security_center/static/11420.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1238 · Nota de Segurança