PT-2007-2873 · Creative · Creative Guestbook

Dj7Xpl · Publicado 2007-03-16 · Atualizado 2017-10-11 · CVE-2007-1479

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Creative Guestbook version 1.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter in the Guestbook.php file.

Recommendations For Creative Guestbook version 1.0, update the Guestbook.php file to validate and sanitize user input to prevent the injection of malicious scripts or HTML.

Exploit

Correção

Identificadores relacionados

CVE-2007-1479

Produtos afetados

Creative Guestbook

Referências · 5

• 🔥 https://exploit-db.com/exploits/3489 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1479 · Nota de Segurança
• http://secunia.com/advisories/24536 · Nota
• http://osvdb.org/34233 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33015 · Nota