PT-2008-4941 · Mrbs · Meeting Room Booking System

Publicado 2008-08-10 · Atualizado 2017-08-08 · CVE-2008-3565

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Meeting Room Booking System (MRBS) version 1.2.6

Description The issue allows remote attackers to inject arbitrary web script or HTML via the area parameter to several API endpoints, including "day.php", "week.php", "month.php", "search.php", "report.php", and "help.php".

Recommendations For Meeting Room Booking System (MRBS) version 1.2.6, consider restricting access to the vulnerable API endpoints until a patch is available. As a temporary workaround, avoid using the area parameter in the affected endpoints to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-3565

Produtos afetados

Meeting Room Booking System

Referências · 11

• 🔥 https://exploit-db.com/exploits/32147 · Exploit
• 🔥 https://exploit-db.com/exploits/32144 · Exploit
• 🔥 https://exploit-db.com/exploits/32148 · Exploit
• 🔥 https://exploit-db.com/exploits/32145 · Exploit
• 🔥 https://exploit-db.com/exploits/32149 · Exploit
• 🔥 http://securityfocus.com/bid/30531/exploit · Exploit
• 🔥 https://exploit-db.com/exploits/32146 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44188 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3565 · Nota de Segurança
• http://securityfocus.com/bid/30531 · Aviso do Fabricante
• http://secunia.com/advisories/31355 · Aviso do Fabricante