PT-2012-2163 · Joomlaboard+1 · Jbshop Plugin+1

Publicado 2012-09-20 · Atualizado 2012-12-20 · CVE-2011-5186

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions e107 version 7

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the item id parameter in the jbShop plugin.

Recommendations For version 7, update the jbShop plugin to a version that fixes this issue, ensuring the item id parameter is properly sanitized to prevent code injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5186

Produtos afetados

E107

Jbshop Plugin

Referências · 4

• 🔥 http://osvdb.org/83371 · Exploit
• 🔥 http://exploit-db.com/exploits/18056 · Exploit
• 🔥 https://exploit-db.com/exploits/18056 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5186 · Nota de Segurança