PT-2006-4932 · Civicspace · Civicspace

Heliosz Root · Publicado 2006-08-11 · Atualizado 2018-10-17 · CVE-2006-4088

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CivicSpace version 0.8.5

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the Subject, Comment, and Add new comment sections.

Recommendations For CivicSpace version 0.8.5, consider restricting user input in the Subject, Comment, and Add new comment sections to prevent the injection of malicious scripts until a patch is available.

Correção

Identificadores relacionados

CVE-2006-4088

Produtos afetados

Civicspace

Referências · 5

• http://securityreason.com/securityalert/1357 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4088 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28303 · Nota
• http://securityfocus.com/archive/1/442704/100/0/threaded · Nota
• http://securityfocus.com/bid/19438 · Nota