PT-2005-4977 · Edatcat · Edatcat

Publicado 2005-12-16 · Atualizado 2008-09-20 · CVE-2005-4289

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions eDatCat version 0.3

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the user action parameter in the EDCstore.pl file.

Recommendations For version 0.3, consider restricting access to the EDCstore.pl file until a patch is available, and avoid using the user action parameter in sensitive operations to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-4289

Produtos afetados

Edatcat

Referências · 4

• 🔥 http://securityfocus.com/bid/15889 · Exploit
• 🔥 https://exploit-db.com/exploits/26847 · Exploit
• http://pridels0.blogspot.com/2005/12/edatcat-xss-vuln.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4289 · Nota de Segurança