PT-2007-1969 · Makler · Maklerplus

Publicado 2007-01-26 · Atualizado 2017-07-29 · CVE-2007-0509

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MaklerPlus versions prior to 1.2

Description The issue involves unspecified vulnerabilities that could potentially lead to cross-site scripting (XSS) or information leaks. Specifically, it may relate to the slogan parameter in main.tpl, which could be vulnerable to XSS, or to error messages that might leak sensitive information.

Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the main.tpl template and avoiding the use of the slogan parameter until a patch is available. Additionally, review error handling mechanisms to prevent potential information leaks.

Correção

Identificadores relacionados

CVE-2007-0509

Produtos afetados

Maklerplus

Referências · 7

• http://osvdb.org/32950 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0509 · Nota de Segurança
• http://secunia.com/advisories/23864 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31734 · Nota
• http://securityfocus.com/bid/22206 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=479940 · Correção
• http://vupen.com/english/advisories/2007/0321 · Nota