PT-2006-1662 · Unknown · Unknown Domain Shoutbox

Aliaksandr Hartsuyeu · Publicado 2006-02-08 · Atualizado 2018-10-19 · CVE-2006-0605

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Unknown Domain Shoutbox version 2005.07.21

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be done possibly via the Handle or Message fields.

Recommendations For version 2005.07.21, as a temporary workaround, consider validating and sanitizing user input in the Handle and Message fields to prevent arbitrary web script or HTML injection. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-0605

Produtos afetados

Unknown Domain Shoutbox

Referências · 7

• http://evuln.com/vulns/55/summary.html · Aviso do Fabricante
• http://secunia.com/advisories/18759 · Aviso do Fabricante
• http://securityfocus.com/bid/16543 · Nota
• http://securityfocus.com/archive/1/424679/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0605 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24440 · Nota
• http://vupen.com/english/advisories/2006/0476 · Nota