PT-2006-5569 · Cloudnine Interactive · Cloudnine Interactive Cj Tag Board

Alex + 1 · Publicado 2006-09-14 · Atualizado 2018-10-17 · CVE-2006-4797

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CloudNine Interactive CJ Tag Board version 3.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter. This could potentially lead to unauthorized actions on the affected system.

Recommendations For CloudNine Interactive CJ Tag Board version 3.0, consider disabling the url BBcode tag in the cjmsg parameter as a temporary workaround until a patch is available. Restrict access to the tag.php file to minimize the risk of exploitation. Avoid using the cjmsg parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-4797

Produtos afetados

Cloudnine Interactive Cj Tag Board

Referências · 6

• http://securityreason.com/securityalert/1580 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28501 · Nota
• http://evuln.com/vulns/137/summary.html · Nota
• http://securityfocus.com/archive/1/445913/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4797 · Nota de Segurança
• http://securityfocus.com/bid/20000 · Nota