PT-2006-3584 · Ifdate · Ifdate

Luny · Publicado 2006-05-30 · Atualizado 2018-10-18 · CVE-2006-2664

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iFdate version 1.2

Description The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via certain input fields, including the username and password fields.

Recommendations For iFdate version 1.2, consider restricting input for the username and password fields to prevent arbitrary web script or HTML injection until a patch is available.

Correção

Identificadores relacionados

CVE-2006-2664

Produtos afetados

Ifdate

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-2664 · Nota de Segurança
• http://securityfocus.com/bid/18102 · Nota
• http://vupen.com/english/advisories/2006/1987 · Nota
• http://securityreason.com/securityalert/991 · Nota
• http://securityfocus.com/archive/1/435010/100/0/threaded · Nota
• http://secunia.com/advisories/20287 · Aviso do Fabricante
• http://osvdb.org/25778 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26678 · Nota