PT-2009-2603 · Redgalaxy · Redgalaxy Download Center

Publicado 2009-09-01 · Atualizado 2017-08-17 · CVE-2008-7134

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RedGalaxy Download Center version 1.2

Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the file parameter, message parameter in a login action, category parameter in a browse action, now parameter, or search parameter in a search results action.

Recommendations For RedGalaxy Download Center version 1.2, as a temporary workaround, consider restricting access to the vulnerable parameters file, message, category, now, and search until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-7134

Produtos afetados

Redgalaxy Download Center

Referências · 7

• 🔥 https://exploit-db.com/exploits/31389 · Exploit
• 🔥 https://exploit-db.com/exploits/31390 · Exploit
• 🔥 https://exploit-db.com/exploits/31391 · Exploit
• 🔥 http://securityfocus.com/bid/28219 · Exploit
• http://download.redgalaxy.net/?nav=home · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2008-7134 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41198 · Nota