PT-2006-2960 · Unknown · Prayer Request Board

Publicado 2006-04-21 · Atualizado 2008-09-05 · CVE-2006-1976

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Prayer Request Board (PRB) Beta 1 versions prior to 20060320

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the Request field in the addRequest.php file.

Recommendations For versions prior to 20060320, update to a version released after 20060320 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-1976

Produtos afetados

Prayer Request Board

Referências · 3

• http://osvdb.org/ref/23/23958-prb.txt · Nota
• http://osvdb.org/23958 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-1976 · Nota de Segurança