PT-2005-1820 · Phpadsnew · Phpadsnew

Cxib8O3 + 1 · Publicado 2005-03-14 · Atualizado 2017-07-11 · CVE-2005-0791

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpAdsNew version 2.0.4-pr1

Description The issue is related to a cross-site scripting (XSS) vulnerability. This occurs when an attacker can inject arbitrary web script or HTML into a website, potentially allowing them to steal user data or take control of the user's session. The vulnerability is specifically in the adframe.php file and can be exploited when the register globals setting is enabled. The refresh parameter is the vulnerable point of entry for this attack.

Recommendations For phpAdsNew version 2.0.4-pr1, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the adframe.php file and avoid using the refresh parameter until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-0791

Produtos afetados

Phpadsnew

Referências · 10

• 🔥 https://exploit-db.com/exploits/25225 · Exploit
• http://secunia.com/advisories/14592 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19692 · Nota
• http://securityreason.com/adv/%5BphpAdsNew%202.0.4-pr1%20Multiple%20vulnerabilities%20cXIb8O3.9%5D.asc · Aviso do Fabricante
• http://osvdb.org/14787 · Nota
• http://securityfocus.com/bid/12803 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0791 · Nota de Segurança
• http://securitytracker.com/id?1013429 · Nota
• http://marc.info/?l=bugtraq&m=111083286926490&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0791 · Nota