PT-2008-2875 · Neptune · Neptune Web Server

Netjackal · Publicado 2008-03-11 · Atualizado 2018-10-11 · CVE-2008-1283

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Neptune Web Server version 3.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the URI. This occurs because the URI is not properly handled in the 404 error page.

Recommendations For Neptune Web Server version 3.0, update the handling of URIs in the 404 error page to properly sanitize input and prevent the injection of arbitrary web script or HTML.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-1283

Produtos afetados

Neptune Web Server

Referências · 6

• 🔥 http://securityfocus.com/bid/28148 · Exploit
• 🔥 https://exploit-db.com/exploits/31362 · Exploit
• http://securityreason.com/securityalert/3725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1283 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41089 · Nota
• http://securityfocus.com/archive/1/489282/100/0/threaded · Nota