PT-2009-1588 · Semanticscuttle · Semanticscuttle

Publicado 2009-02-11 · Atualizado 2017-08-08 · CVE-2008-6113

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SemanticScuttle versions prior to 0.90

Description The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This is connected to the username and the profile page.

Recommendations For versions prior to 0.90, update to version 0.90 or later to resolve the issue. As a temporary workaround, consider restricting user input for the username field and limiting access to the profile page until the update is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-6113

Produtos afetados

Semanticscuttle

Referências · 5

• http://securityfocus.com/bid/32409 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46754 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6113 · Nota de Segurança
• http://sourceforge.net/project/shownotes.php?release_id=640424 · Nota
• http://secunia.com/advisories/32722 · Aviso do Fabricante