PT-2011-4577 · Sonexis · Sonexis Conferencemanager

Rob Kraus · Publicado 2011-09-27 · Atualizado 2012-02-14 · CVE-2011-3687

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.2.11.0

Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved through several parameters in different ASP pages, including txtConferenceID in HostLogin.asp and ParticipantLogin.asp, acp in ForgotPIN.asp, and Description, title, or Heading in Error.asp.

Recommendations For Sonexis ConferenceManager version 9.2.11.0, consider restricting access to the HostLogin.asp, ParticipantLogin.asp, ForgotPIN.asp, and Error.asp pages until a patch is available. As a temporary workaround, avoid using the txtConferenceID, acp, Description, title, and Heading parameters in the affected API endpoints.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-3687

Produtos afetados

Sonexis Conferencemanager

Referências · 3

• 🔥 http://solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3687 · Nota de Segurança
• http://securityreason.com/securityalert/8400 · Nota