PT-2005-4969 · Zaygo · Zaygo Hostingcart

Publicado 2005-12-16 · Atualizado 2011-03-08 · CVE-2005-4281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zaygo HostingCart versions 2.0 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to "zaygo.cgi".

Recommendations For Zaygo HostingCart versions 2.0 and earlier, consider disabling the search module or restricting access to the root parameter in "zaygo.cgi" until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4281

Produtos afetados

Zaygo Hostingcart

Referências · 5

• http://osvdb.org/21729 · Nota
• http://secunia.com/advisories/18036 · Aviso do Fabricante
• http://pridels0.blogspot.com/2005/12/hostingcart-xss.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4281 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2916 · Nota