PT-2005-1858 · Php Fusion+1 · Php-Fusion+1

Pi3Ch · Publicado 2005-03-22 · Atualizado 2016-10-18 · CVE-2005-0829

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 5.01

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the user name or user pass parameters in the setuser.php file of the Digitanium addon.

Recommendations For PHP-Fusion version 5.01, consider disabling the setuser.php file or restricting access to it until a patch is available. Avoid using the user name and user pass parameters in the affected file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-0829

Produtos afetados

Digitanium

Php-Fusion

Referências · 6

• 🔥 https://exploit-db.com/exploits/25241 · Exploit
• http://marc.info/?l=bugtraq&m=111142918711745&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0829 · Nota
• http://marc.info/?l=bugtraq&m=111142752220155&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0829 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111125692513645&w=2 · Nota