PT-2006-5517 · Idevspot · Idevspot Phplinkexchange

S3Rv3R_Hack3R · Publicado 2006-09-13 · Atualizado 2018-10-17 · CVE-2006-4742

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IDevSpot PhpLinkExchange version 1.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the msg parameter in the user add.php file.

Recommendations For IDevSpot PhpLinkExchange version 1.0, consider restricting access to the user add.php file or avoiding the use of the msg parameter until a fix is available. As a temporary workaround, disabling the execution of scripts from this parameter can help mitigate the risk.

Exploit

Correção

Identificadores relacionados

CVE-2006-4742

Produtos afetados

Idevspot Phplinkexchange

Referências · 5

• 🔥 https://exploit-db.com/exploits/2347 · Exploit
• 🔥 http://securityfocus.com/bid/19931 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4742 · Nota de Segurança
• http://securityfocus.com/archive/1/445780/100/0/threaded · Nota
• http://securityreason.com/securityalert/1561 · Nota