PT-2009-5821 · Radbids · Radbids Gold

Moudi · Publicado 2009-10-02 · Atualizado 2017-09-19 · CVE-2009-3530

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RadBids Gold version 4

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the mode parameter in the storefront.php file.

Recommendations For RadBids Gold version 4, update the storefront.php file to properly sanitize the mode parameter to prevent XSS attacks. As a temporary workaround, consider restricting access to the storefront.php file until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-3530

Produtos afetados

Radbids Gold

Referências · 5

• 🔥 https://exploit-db.com/exploits/9194 · Exploit
• 🔥 http://exploit-db.com/exploits/9194 · Exploit
• http://secunia.com/advisories/35827 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51837 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3530 · Nota de Segurança