PT-2007-2601 · Webapp · Webapp

Publicado 2007-02-28 · Atualizado 2017-07-29 · CVE-2007-1174

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 20070214

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to unspecified fields in user profiles.

Recommendations For versions prior to 20070214, update to a version released after 20070214 to resolve the issue. As a temporary workaround, consider restricting access to user profiles until the update is applied. Avoid using unspecified fields in user profiles that may be related to the XSS vulnerabilities until the issue is resolved.

Correção

Identificadores relacionados

CVE-2007-1174

Produtos afetados

Webapp

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/32506 · Nota
• http://vupen.com/english/advisories/2007/0605 · Nota
• http://osvdb.org/33301 · Nota
• http://securityfocus.com/bid/22563 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1174 · Nota de Segurança
• http://web-app.org/cgi-bin/index.cgi?action=viewnews&id=251 · Correção