PT-2011-1740 · Open Cit · Open It Overlook

Eliteman · Publicado 2011-04-27 · Atualizado 2017-08-17 · CVE-2010-4792

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OPEN IT OverLook version 5.0

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the frame parameter in the title.php file.

Recommendations For OPEN IT OverLook version 5.0, consider restricting access to the title.php file or disabling the frame parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-4792

Produtos afetados

Open It Overlook

Referências · 8

• 🔥 http://securityfocus.com/bid/43872 · Exploit
• 🔥 https://exploit-db.com/exploits/34826 · Exploit
• 🔥 http://packetstormsecurity.org/1010-exploits/overlook-xss.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62361 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4792 · Nota de Segurança
• http://anatoliasecurity.com/adv/as-adv-2010-002.txt · Nota
• http://secunia.com/advisories/41771 · Aviso do Fabricante
• http://securityreason.com/securityalert/8220 · Nota