PT-2011-4579 · Wibu Systems · Codemeter Webadmin

Publicado 2011-09-27 · Atualizado 2012-05-21 · CVE-2011-3689

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter WebAdmin versions 3.30 through 4.30

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the BoxSerial parameter in Licenses.html.

Recommendations For versions 3.30 through 4.30, avoid using the BoxSerial parameter in the affected Licenses.html until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-3689

Produtos afetados

Codemeter Webadmin

Referências · 2

• 🔥 http://solutionary.com/index/SERT/Vuln-Disclosures/CodeMeter-WebAdmin.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3689 · Nota de Segurança