PT-2010-3159 · Pmwiki · Pmwiki

Publicado 2010-05-11 · Atualizado 2018-10-10 · CVE-2010-1481

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PmWiki version 2.2.15

Description A cross-site scripting (XSS) issue exists in the table feature, allowing remote authenticated users to inject arbitrary web script or HTML via the width attribute.

Recommendations For PmWiki version 2.2.15, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-1481

Produtos afetados

Pmwiki

Referências · 6

• 🔥 http://int21.de/cve/CVE-2010-1481-pmwiki-xss.html · Exploit
• http://secunia.com/advisories/39698 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1481 · Nota de Segurança
• http://securityfocus.com/archive/1/511177/100/0/threaded · Nota
• http://securityfocus.com/bid/39994 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1481 · Nota