PT-2005-3756 · Pblang · Pblang

Rgod · Publicado 2005-09-14 · Atualizado 2017-07-11 · CVE-2005-2894

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PBLang versions 4.65 and earlier

Description A cross-site scripting (XSS) issue exists in the user registration functionality, allowing remote attackers to inject arbitrary web script or PHP code via the location field. This could potentially lead to unauthorized actions on the affected system.

Recommendations For versions 4.65 and earlier, consider validating and sanitizing user input in the location field to prevent XSS attacks. As a temporary workaround, restrict access to the user registration functionality until a fix is available.

Correção

Identificadores relacionados

CVE-2005-2894

Produtos afetados

Pblang

Referências · 4

• http://securityfocus.com/bid/14766 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22190 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2894 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112611338417979&w=2 · Nota