PT-2005-4777 · Mrcgiguy · Hot Links Pro+1

Publicado 2005-12-06 · Atualizado 2011-03-08 · CVE-2005-4041

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MR CGI Guy Hot Links SQL versions 3.1.x Hot Links Pro versions 3.1.x

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the search.cgi component.

Recommendations For MR CGI Guy Hot Links SQL versions 3.1.x, update to a version that fixes this issue. For Hot Links Pro versions 3.1.x, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-4041

Produtos afetados

Hot Links Pro

Mr. Cgi Guy Hot Links Sql-Php

Referências · 8

• http://secunia.com/advisories/17868 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2737 · Nota
• http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html · Nota
• http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4041 · Nota de Segurança
• http://secunia.com/advisories/17872 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2736 · Nota
• http://securityfocus.com/bid/15708 · Nota