PT-2006-5796 · Ktools.Net · Ktools.Net Photostore

Meto5757 · Publicado 2006-09-28 · Atualizado 2018-10-17 · CVE-2006-5057

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ktools.net PhotoStore (affected versions not specified)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities are found in the gid parameter in details.php and the photogid parameter in view photog.php.

Recommendations For the vulnerability in details.php, consider restricting the input for the gid parameter to prevent arbitrary script injection until a fix is available. For the vulnerability in view photog.php, consider restricting the input for the photogid parameter to prevent arbitrary script injection until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-5057

Produtos afetados

Ktools.Net Photostore

Referências · 8

• 🔥 http://securityfocus.com/bid/20172 · Exploit
• 🔥 https://exploit-db.com/exploits/28663 · Exploit
• 🔥 https://exploit-db.com/exploits/28662 · Exploit
• http://securityreason.com/securityalert/1640 · Nota
• http://securityfocus.com/archive/1/446909/100/0/threaded · Nota
• http://secunia.com/advisories/22122 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5057 · Nota de Segurança
• http://vupen.com/english/advisories/2006/3781 · Nota