PT-2010-1367 · Viart · Viart Cms

Publicado 2010-01-04 · Atualizado 2017-08-17 · CVE-2009-4547

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ViArt CMS versions 3.x

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited via the category id parameter to "forums.php", or the forum id parameter to "forum.php" or "forum topic new.php".

Recommendations For ViArt CMS version 3.x, update to a version that includes a fix for these XSS vulnerabilities. As a temporary workaround, consider restricting access to the "forums.php", "forum.php", and "forum topic new.php" scripts until a patch is available. Avoid using the category id and forum id parameters in the affected scripts until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-4547

Produtos afetados

Viart Cms

Referências · 11

• 🔥 http://securityfocus.com/bid/36003 · Exploit
• 🔥 https://exploit-db.com/exploits/33155 · Exploit
• 🔥 https://exploit-db.com/exploits/33158 · Exploit
• 🔥 http://packetstormsecurity.org/0908-exploits/viartcms-xss.txt · Exploit
• 🔥 https://exploit-db.com/exploits/33157 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52371 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4547 · Nota de Segurança
• http://osvdb.org/56883 · Nota
• http://secunia.com/advisories/36241 · Aviso do Fabricante
• http://osvdb.org/56885 · Nota
• http://osvdb.org/56884 · Nota