PT-2006-3792 · Osads · Osads Alliance Database

Publicado 2006-06-06 · Atualizado 2017-07-20 · CVE-2006-2874

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OSADS Alliance Database versions prior to 1.4

Description The issue is related to a "Security Leak to lock in HTML-Code" and may be due to a cross-site scripting (XSS) vulnerability involving comments. This could potentially allow for the injection of malicious HTML code.

Recommendations For versions prior to 1.4, update to version 1.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of comments to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-2874

Produtos afetados

Osads Alliance Database

Referências · 7

• http://securityfocus.com/bid/18280 · Correção
• http://osads.sourceforge.net/viewtopic.php?t=3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2874 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2143 · Nota
• http://secunia.com/advisories/20441 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26914 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=422081 · Correção