PT-2005-3897 · Perldiver · Perldiver

Donnie Werner · Publicado 2005-09-27 · Atualizado 2011-03-08 · CVE-2005-3066

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PerlDiver versions 1.x

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the query string in perldiver.pl. This issue was initially disputed by the vendor but has since been acknowledged.

Recommendations For PerlDiver version 1.x, update to a version where this issue has been addressed, as the vendor has acknowledged the problem.

Exploit

Correção

Identificadores relacionados

CVE-2005-3066

Produtos afetados

Perldiver

Referências · 7

• 🔥 http://scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443 · Exploit
• 🔥 http://securitytracker.com/id?1015146 · Exploit
• 🔥 http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt · Exploit
• 🔥 http://scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3066 · Nota de Segurança
• http://scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447 · Correção