PT-2006-5868 · Ph03Y3Nk · Ph03Y3Nk Just Another Flat File (Jaf) Cms

Publicado 2006-10-02 · Atualizado 2008-09-05 · CVE-2006-5130

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ph03y3nk just another flat file (JAF) CMS version 4.0 RC1

Description The issue allows remote attackers to inject arbitrary web script or HTML via the name, url, title, and about parameters in a forum post, potentially leading to cross-site scripting (XSS) attacks.

Recommendations For ph03y3nk just another flat file (JAF) CMS version 4.0 RC1, consider restricting input for the name, url, title, and about parameters in forum posts to prevent arbitrary web script or HTML injection until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-5130

Produtos afetados

Ph03Y3Nk Just Another Flat File (Jaf) Cms

Referências · 2

• http://secunia.com/advisories/22143 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-5130 · Nota de Segurança