PT-2010-1740 · Small Pirate · Spirate

Yenh4Cker · Publicado 2010-07-22 · Atualizado 2018-10-10 · CVE-2009-4937

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Small Pirate (SPirate) version 2.1

Description The issue allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag, which can lead to cross-site scripting (XSS).

Recommendations For version 2.1, consider disabling the use of img and url BBCode tags until a patch is available to prevent exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-4937

Produtos afetados

Spirate

Referências · 6

• 🔥 http://exploit-db.com/exploits/8819 · Exploit
• 🔥 http://osvdb.org/54783 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50836 · Nota
• http://securityfocus.com/archive/1/503863/100/0/threaded · Nota
• http://secunia.com/advisories/35272 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4937 · Nota de Segurança