PT-2008-6308 · Rat Cms · The Rat Cms

Publicado 2008-11-19 · Atualizado 2018-10-11 · CVE-2008-5164

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions The Rat CMS Pre-Alpha 2

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id parameter to "viewarticle.php" and "viewarticle2.php" and the PATH INFO to "viewarticle.php".

Recommendations For The Rat CMS Pre-Alpha 2, consider restricting access to the viewarticle.php and viewarticle2.php scripts until a patch is available. As a temporary workaround, avoid using the id parameter in these scripts and restrict the PATH INFO to "viewarticle.php" to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5164

Produtos afetados

The Rat Cms

Referências · 7

• 🔥 http://securityfocus.com/bid/29959 · Exploit
• 🔥 https://exploit-db.com/exploits/31975 · Exploit
• 🔥 https://exploit-db.com/exploits/31976 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5164 · Nota de Segurança
• http://securityreason.com/securityalert/4612 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43378 · Nota
• http://securityfocus.com/archive/1/493684/100/0/threaded · Nota