PT-2005-2805 · Liberum · Liberum Help Desk

Dedi Dwianto · Publicado 2005-06-02 · Atualizado 2016-10-18 · CVE-2005-1838

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Liberum Help Desk version 0.97.3

Description The issue concerns multiple cross-site scripting vulnerabilities in the castnewPost.asp file. Remote attackers can inject arbitrary web script or HTML via the Email, Title, or Description fields.

Recommendations For Liberum Help Desk version 0.97.3, consider restricting input to the Email, Title, and Description fields to prevent arbitrary web script or HTML injection until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-1838

Produtos afetados

Liberum Help Desk

Referências · 3

• 🔥 http://echo.or.id/adv/adv14-theday-2005.txt · Exploit
• http://marc.info/?l=bugtraq&m=111773586701991&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1838 · Nota de Segurança