PT-2004-2507 · Coolphp · Coolphp

R00Tcr4Ck · Publicado 2004-10-16 · Atualizado 2017-07-11 · CVE-2004-1599

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CoolPHP version 1.0-stable

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to execute arbitrary web script or HTML. The vulnerability can be exploited via the query or nick parameters.

Recommendations For CoolPHP version 1.0-stable, update the index.php file to properly sanitize the query and nick parameters to prevent XSS attacks. As a temporary workaround, consider restricting access to the index.php file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-1599

Produtos afetados

Coolphp

Referências · 6

• 🔥 http://securitytracker.com/id?1011748 · Exploit
• 🔥 http://secunia.com/advisories/12850 · Exploit
• 🔥 http://securityfocus.com/bid/11437 · Exploit
• http://marc.info/?l=bugtraq&m=109810941419669&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17742 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1599 · Nota de Segurança