PT-2012-2162 · Unknown · Online Subtitles Workshop

M.Jock3R · Publicado 2012-09-20 · Atualizado 2012-09-20 · CVE-2011-5185

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Online Subtitles Workshop versions prior to 2.0 rev 131

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the comment parameter in the video comments.php file.

Recommendations For versions prior to 2.0 rev 131, update to version 2.0 rev 131 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5185

Produtos afetados

Online Subtitles Workshop

Referências · 4

• 🔥 http://exploit-db.com/exploits/18035 · Exploit
• 🔥 https://exploit-db.com/exploits/18035 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5185 · Nota de Segurança
• http://onlinesubtitles.svn.sourceforge.net/viewvc/onlinesubtitles/video_comments.php?r1=31&r2=131&pathrev=146 · Correção