PT-2007-2069 · Free Lan In(Tra|Ter)Net Portal · Flip

Publicado 2007-01-31 · Atualizado 2011-03-08 · CVE-2007-0611

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Free LAN In(tra|ter)net Portal (FLIP) versions prior to 1.0-RC2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in files such as inc.page.php and inc.text.php.

Recommendations For versions prior to 1.0-RC2, update to version 1.0-RC2 or later to resolve the issue. As a temporary workaround, consider restricting access to the inc.page.php and inc.text.php files until a patch is available. Avoid using these files in a way that could allow arbitrary web script or HTML injection until the issue is resolved.

Correção

Identificadores relacionados

CVE-2007-0611

Produtos afetados

Flip

Referências · 5

• http://vupen.com/english/advisories/2007/0360 · Nota
• http://osvdb.org/36683 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0611 · Nota de Segurança
• http://osvdb.org/36682 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=480714&group_id=98260 · Nota