PT-2005-2006 · Unknown · Yet Another Forum.Net

Maty Siman · Publicado 2005-04-05 · Atualizado 2016-10-18 · CVE-2005-0982

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Yet Another Forum.net version 0.9.9

Description The issue allows remote attackers to inject arbitrary web script or HTML via the name, location, or Subject field, which can lead to cross-site scripting (XSS) attacks. XSS is a type of attack where an attacker injects malicious scripts into a website, which can then be executed by the user's browser, potentially leading to unauthorized actions or data theft.

Recommendations For Yet Another Forum.net version 0.9.9, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting user input in the name, location, and Subject fields to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0982

Produtos afetados

Yet Another Forum.Net

Referências · 4

• http://marc.info/?l=bugtraq&m=111247338301262&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0982 · Nota de Segurança
• http://securitytracker.com/id?1013632 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0982 · Nota