PT-2005-1831 · Acs · Acs Blog

Farhad Koosha · Publicado 2005-03-20 · Atualizado 2017-07-11 · CVE-2005-0802

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ACS Blog versions 0.8 through 1.1b

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to execute arbitrary web script or HTML. This is achieved via the search parameter in the "search.asp" page.

Recommendations For versions 0.8 through 1.1b, update to a version that fixes this issue to prevent exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0802

Produtos afetados

Acs Blog

Referências · 8

• 🔥 http://securitytracker.com/id?1013470 · Exploit
• 🔥 http://securityfocus.com/bid/12836 · Exploit
• 🔥 https://exploit-db.com/exploits/25233 · Exploit
• http://osvdb.org/14861 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19728 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0802 · Nota de Segurança
• http://secunia.com/advisories/14625 · Nota
• http://marc.info/?l=bugtraq&m=111108840811698&w=2 · Nota