PT-2005-4797 · Xcclassified · Xcclassified

Publicado 2005-12-07 · Atualizado 2011-03-08 · CVE-2005-4062

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions XcClassified versions 3.x

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the search parameters in the CPSearch.asp file.

Recommendations For XcClassified versions 3.x, consider restricting access to the CPSearch.asp file until a patch is available, and avoid using the search function with untrusted input to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4062

Produtos afetados

Xcclassified

Referências · 6

• http://vupen.com/english/advisories/2005/2760 · Nota
• http://pridels0.blogspot.com/2005/12/xcclassified-v3x-xss-vuln.html · Nota
• http://osvdb.org/21470 · Nota
• http://secunia.com/advisories/17903 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4062 · Nota de Segurança
• http://securityfocus.com/bid/15738 · Nota