PT-2005-2598 · Phpmychat · Phpmychat

Megasky · Publicado 2005-05-16 · Atualizado 2018-10-19 · CVE-2005-1619

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHPMyChat version 0.14.5

Description The issue allows remote attackers to inject arbitrary web script or HTML commands via the FontName parameter in certain PHP files, specifically start page.css.php3 (also known as start-page.css.php3) or style.css.php3.

Recommendations For PHPMyChat version 0.14.5, consider restricting access to the FontName parameter in the affected PHP files until a patch is available. As a temporary workaround, avoid using the FontName parameter in the vulnerable API endpoints or files.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2005-1619

Produtos afetados

Phpmychat

Referências · 7

• 🔥 https://exploit-db.com/exploits/25660 · Exploit
• 🔥 https://exploit-db.com/exploits/25659 · Exploit
• http://securityfocus.com/bid/13628 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1619 · Nota de Segurança
• http://securityfocus.com/archive/1/484575/100/0/threaded · Nota
• http://securityfocus.com/bid/13627 · Nota
• http://marc.info/?l=bugtraq&m=111602076500031&w=2 · Nota