PT-2004-2445 · Phpkit · Phpkit

Steve · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1537

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHPKIT versions 1.6.03 through 1.6.1

Description A cross-site scripting (XSS) issue allows remote attackers to execute arbitrary web script. The issue is related to the img parameter in the popup.php file.

Recommendations For PHPKIT versions 1.6.03 through 1.6.1, consider disabling the img parameter in the popup.php file until a patch is available. Restrict access to the popup.php file to minimize the risk of exploitation. Avoid using the img parameter in the affected popup.php file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-1537

Produtos afetados

Phpkit

Referências · 7

• 🔥 http://securityfocus.com/bid/11725 · Exploit
• 🔥 https://exploit-db.com/exploits/24762 · Exploit
• http://secunia.com/advisories/13262 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18204 · Nota
• http://marc.info/?l=bugtraq&m=110117116115493&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1537 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1537 · Nota de Segurança