PT-2005-5129 · Aspbite · Aspbite

Publicado 2005-12-21 · Atualizado 2008-09-05 · CVE-2005-4446

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ASPBite versions 8.x

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the strSearch parameter in the "index.asp" file.

Recommendations For ASPBite version 8.x, avoid using the strSearch parameter in the index.asp file until a fix is available. Consider validating and sanitizing all user input to prevent malicious script injection.

Correção

Identificadores relacionados

CVE-2005-4446

Produtos afetados

Aspbite

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-4446 · Nota de Segurança
• http://secunia.com/advisories/18132 · Aviso do Fabricante
• http://securityfocus.com/bid/15991 · Nota