PT-2005-4787 · E107 · E107

Marc Ruef + 1 · Publicado 2005-12-07 · Atualizado 2018-10-19 · CVE-2005-4052

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions e107 version 0.6174

Description The issue allows remote attackers to redirect users to other web sites via the download parameter in "rate.php". This occurs after a user submits a file download rating. By default, the e BASE variable restricts the redirection to the same web site.

Recommendations For e107 version 0.6174, consider restricting access to the "rate.php" file or validating the download parameter to prevent unauthorized redirects. As a temporary workaround, restrict the e BASE variable to limit redirections to the same web site.

Exploit

Correção

Identificadores relacionados

CVE-2005-4052

Produtos afetados

E107

Referências · 5

• 🔥 http://secunia.com/advisories/17890 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4052 · Nota de Segurança
• http://securityreason.com/securityalert/229 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4052 · Nota
• http://securityfocus.com/archive/1/418577/100/0/threaded · Nota