PT-2004-3108 · Embedthis · Mbedthis Appweb

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2213

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mbedthis AppWeb versions prior to 1.1.3

Description The issue allows remote attackers to obtain the source code for scripts via specific manipulations of an HTTP request, such as appending a trailing dot (.) or a trailing space.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-2213

Produtos afetados

Mbedthis Appweb

Referências · 6

• http://securityfocus.com/bid/10673 · Correção
• http://osvdb.org/7390 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2213 · Nota de Segurança
• http://secunia.com/advisories/12011 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16636 · Nota
• http://mbedthis.com/products/appWeb/doc/product/newFeatures.html · Nota