PT-2006-4626 · Osdate · Osdate

Publicado 2006-07-21 · Atualizado 2018-10-17 · CVE-2006-3766

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions osDate versions 1.1.7 and earlier

Description The issue allows users to manipulate their ratings by exploiting a parameter that controls the score, specifically the txtrating parameter, allowing them to set a score greater than the intended maximum of 10.

Recommendations For osDate versions 1.1.7 and earlier, as a temporary workaround, consider restricting the use of the txtrating parameter to prevent users from setting scores above the intended maximum until a fix is available.

Correção

Identificadores relacionados

CVE-2006-3766

Produtos afetados

Osdate

Referências · 5

• http://securityfocus.com/archive/1/440592/100/0/threaded · Nota
• http://securitytracker.com/id?1016700 · Nota
• http://securityfocus.com/archive/1/443198/100/200/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3766 · Nota de Segurança
• http://securityfocus.com/archive/1/440490/100/0/threaded · Nota