PT-2005-1932 · Maxthon · Maxthon

Aviv Raff · Publicado 2005-03-29 · Atualizado 2016-10-18 · CVE-2005-0905

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maxthon version 1.2.0

Description The issue allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2 search text property.

Recommendations For Maxthon version 1.2.0, consider restricting access to the m2 search text property to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-0905

Produtos afetados

Maxthon

Referências · 7

• 🔥 https://exploit-db.com/exploits/25274 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0905 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=111175236620942&w=2 · Nota
• http://securityfocus.com/bid/12898 · Correção
• http://forum.maxthon.com/forum/index.php?showtopic=18207 · Correção
• http://raffon.net/advisories/maxthon/searchbarid.html · Aviso do Fabricante
• http://secunia.com/advisories/14712 · Aviso do Fabricante