PT-2010-1368 · Viart · Viart Helpdesk

Publicado 2010-01-04 · Atualizado 2017-08-17 · CVE-2009-4548

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ViArt Helpdesk versions 3.x

Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to various PHP files. This can be achieved by manipulating the category id parameter in files such as "products.php", "article.php", "product details.php", or "reviews.php", the forum id parameter in "forum.php", or the search category id parameter in "products search.php".

Recommendations For ViArt Helpdesk version 3.x, as a temporary workaround, consider restricting access to the vulnerable parameters category id, forum id, and search category id in the respective PHP files until a patch is available. Avoid using these parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-4548

Produtos afetados

Viart Helpdesk

Referências · 16

• 🔥 https://exploit-db.com/exploits/34494 · Exploit
• 🔥 https://exploit-db.com/exploits/34495 · Exploit
• 🔥 https://exploit-db.com/exploits/34499 · Exploit
• 🔥 http://packetstormsecurity.org/0908-exploits/viarthd-xss.txt · Exploit
• 🔥 https://exploit-db.com/exploits/34498 · Exploit
• 🔥 https://exploit-db.com/exploits/34496 · Exploit
• 🔥 https://exploit-db.com/exploits/34497 · Exploit
• http://osvdb.org/56881 · Nota
• http://osvdb.org/56877 · Nota
• http://osvdb.org/56880 · Nota
• http://secunia.com/advisories/36240 · Aviso do Fabricante
• http://osvdb.org/56882 · Nota
• http://osvdb.org/56879 · Nota
• http://osvdb.org/56878 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52349 · Nota