PT-2011-1706 · E107 · E107

Justin C. Klein Keane · Publicado 2011-03-15 · Atualizado 2017-08-17 · CVE-2010-4757

Mitre

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-4757

Produtos afetados

E107

Referências · 8

• 🔥 http://madirish.net/?article=471 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4757 · Nota de Segurança
• http://securitytracker.com/id?1024351 · Nota
• http://e107.org/comment.php?comment.news.872 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4757 · Nota
• http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.7/e107_admin/newspost.php?r1=11655&r2=11654&pathrev=11655 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61331 · Nota
• http://e107.org/svn_changelog.php?version=0.7.23 · Nota