PT-2007-4560 · Php · Php Hosting Biller

Publicado 2007-06-19 · Atualizado 2018-10-16 · CVE-2007-3281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Php Hosting Biller version 1.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH INFO in index.php.

Recommendations For Php Hosting Biller version 1.0, consider validating and sanitizing user input to prevent the injection of malicious scripts or HTML, specifically for the PATH INFO in index.php. As a temporary workaround, restrict access to index.php to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-3281

Produtos afetados

Php Hosting Biller

Referências · 9

• 🔥 http://securityfocus.com/bid/24517 · Exploit
• 🔥 https://exploit-db.com/exploits/30200 · Exploit
• http://securityreason.com/securityalert/2811 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34941 · Nota
• http://vupen.com/english/advisories/2007/2248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3281 · Nota de Segurança
• http://secunia.com/advisories/25681 · Nota
• http://securityfocus.com/archive/1/471642/100/0/threaded · Nota
• http://osvdb.org/36374 · Nota