PT-2008-6071 · Tribiq · Tribiq Cms

Publicado 2008-11-04 · Atualizado 2017-08-08 · CVE-2008-4893

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tribiq CMS version 5.0.10a

Description A cross-site scripting (XSS) issue exists due to the ability of remote attackers to inject arbitrary web script or HTML. This is possible via the template path parameter when register globals is enabled.

Recommendations For Tribiq CMS version 5.0.10a, consider disabling the register globals setting to mitigate the risk of exploitation. Additionally, restrict access to the template path parameter in the affected header.inc.php file until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-4893

Produtos afetados

Tribiq Cms

Referências · 6

• 🔥 https://exploit-db.com/exploits/6888 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46265 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4893 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4893 · Nota de Segurança
• http://secunia.com/advisories/32548 · Aviso do Fabricante
• http://securityfocus.com/bid/32050 · Nota