PT-2007-1468 · Webapp · Webapp

Publicado 2007-04-03 · Atualizado 2008-09-05 · CVE-2006-7190

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 20060515

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function. This is related to the use of doubbctopic instead of doubbc.

Recommendations For versions prior to 20060515, update to version 20060515 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin/user-lib/topics.pl script until the update is applied.

Correção

Identificadores relacionados

CVE-2006-7190

Produtos afetados

Webapp

Referências · 3

• http://web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 · Correção
• http://web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-7190 · Nota de Segurança