PT-2009-1175 · Xmb · Xmb

Publicado

2009-07-05

·

Atualizado

2021-04-29

·

CVE-2007-6728

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions XMB version 1.5
Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration. This could potentially lead to unauthorized actions on the affected system.
Recommendations For XMB version 1.5, consider restricting access to the user registration functionality until a fix is available, and avoid using the MSN field in the registration process to minimize the risk of exploitation.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-6728

Produtos afetados

Xmb