PT-2009-1479 · Aj · Aj Auction Pro Platinum

Injector5 · Publicado 2009-01-28 · Atualizado 2017-09-29 · CVE-2008-6004

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AJ Auction Pro Platinum version 2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the product parameter in the "search.php" file.

Recommendations For AJ Auction Pro Platinum version 2, update the search.php file to properly sanitize the product parameter to prevent XSS attacks.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-6004

Produtos afetados

Aj Auction Pro Platinum

Referências · 4

• 🔥 https://exploit-db.com/exploits/6561 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6004 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45431 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6004 · Nota de Segurança