PT-2005-2104 · Aedating · Aedating

Publicado 2005-04-12 · Atualizado 2008-09-05 · CVE-2005-1085

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions aeDating version 3.2

Description The issue is related to a cross-site scripting (XSS) vulnerability in the control panel. This allows remote attackers to inject arbitrary web script or HTML, potentially leading to unauthorized actions on the affected system.

Recommendations For aeDating version 3.2, update to a newer version that contains a fix for this issue, as using outdated software can pose significant security risks. If no specific fix is provided for version 3.2, consider disabling access to the control panel until a patch is available to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1085

Produtos afetados

Aedating

Referências · 2

• http://secunia.com/advisories/14913 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1085 · Nota de Segurança