PT-2005-5309 · Edgewall · Edgewall Trac

Dkg-Debian.Org@… · Publicado 2005-12-31 · Atualizado 2022-05-01 · CVE-2005-4644

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Edgewall Trac version 0.9.2

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by injecting javascript in the SRC attribute of an IMG tag.

Recommendations For Edgewall Trac version 0.9.2, update to a version that fixes this issue to prevent exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2005-4644

DSA-951-2

GHSA-6VHP-HP77-6W52

PYSEC-2005-1

Produtos afetados

Edgewall Trac

Referências · 19

• 🔥 http://projects.edgewall.com/trac/ticket/2473 · Exploit
• https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2005-1.yaml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4644 · Nota de Segurança
• http://trac.edgewall.org/ticket/2473 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24183 · Nota
• http://debian.org/security/2006/dsa-951 · Aviso do Fabricante
• http://secunia.com/advisories/18555 · Nota
• https://osv.dev/vulnerability/PYSEC-2005-1 · Aviso do Fabricante
• https://web.archive.org/web/20151104154255/http://secunia.com/advisories/18555 · Nota
• https://osv.dev/vulnerability/GHSA-6vhp-hp77-6w52 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4644 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4644 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-4644 · Aviso do Fabricante
• http://securityfocus.com/bid/16198 · Correção
• http://secunia.com/advisories/18465 · Nota