PT-2006-2442 · Annuaire · Annuaire

Publicado 2006-04-03 · Atualizado 2017-07-20 · CVE-2006-1434

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Annuaire (Directory) version 1.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the COMMENTAIRE parameter in the Comment Field of inscription.php.

Recommendations For Annuaire (Directory) version 1.0, consider restricting access to the inscription.php file or disabling the Comment Field until a fix is available. Avoid using the COMMENTAIRE parameter in the affected endpoint to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-1434

Produtos afetados

Annuaire

Referências · 6

• http://securityfocus.com/bid/17393 · Nota
• http://osvdb.org/ref/24/24302-annuaire_directory.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1434 · Nota de Segurança
• http://osvdb.org/24303 · Nota
• http://secunia.com/advisories/19548 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25669 · Nota