PT-2007-3591 · Tjs · Tjschat

Publicado 2007-04-25 · Atualizado 2018-10-16 · CVE-2007-2256

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TJSChat version 0.95

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the user parameter in the 'you.php' file.

Recommendations For TJSChat version 0.95, consider restricting access to the you.php file or validating and sanitizing the user parameter to prevent injection of malicious scripts. As a temporary workaround, avoid using the user parameter in the affected file until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-2256

Produtos afetados

Tjschat

Referências · 8

• 🔥 https://exploit-db.com/exploits/29876 · Exploit
• http://securityfocus.com/bid/23593 · Nota
• http://securityfocus.com/archive/1/466649/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33845 · Nota
• http://securityreason.com/securityalert/2620 · Nota
• http://secunia.com/advisories/24998 · Nota
• http://vupen.com/english/advisories/2007/1517 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2256 · Nota de Segurança