PT-2005-1359 · Wings Simulations · Soldner Secret Wars

Luigi Auriemma · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Soldner Secret Wars version 30830

Description The issue is related to a cross-site scripting (XSS) vulnerability in the web interface. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a user message. The message is not filtered or quoted when the administrator views the server logs, making it possible for attackers to execute malicious scripts.

Recommendations For version 30830, ensure that all user input, especially messages, is properly filtered and quoted before being displayed in the server logs to prevent XSS attacks. As a temporary workaround, consider restricting access to the server logs or implementing additional validation for user messages to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0281

Produtos afetados

Soldner Secret Wars

Referências · 5

• 🔥 http://securityfocus.com/bid/12162 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18753 · Nota
• http://secunia.com/advisories/13716 · Nota
• http://marc.info/?l=bugtraq&m=110486654213504&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0281 · Nota de Segurança