PT-2005-1806 · Unknown · Photopost Php

Igor Franchuk · Publicado 2005-03-20 · Atualizado 2017-07-11 · CVE-2005-0777

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PhotoPost PHP version 5.0 RC3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are specifically found in the check tags function and the editbio field in the user profile.

Recommendations For PhotoPost PHP version 5.0 RC3, consider disabling the check tags function and restricting access to the editbio field in the user profile until a patch is available. Avoid using the editbio field in user profiles until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-0777

Produtos afetados

Photopost Php

Referências · 6

• http://securityfocus.com/bid/12779 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0777 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0777 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111065868402859&w=2 · Nota
• http://secunia.com/advisories/14576 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19678 · Nota