PT-2012-2462 · Stoneware · Webnetwork

Publicado 2012-01-24 · Atualizado 2012-01-24 · CVE-2012-0285

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 6.0.8.0, update to version 6.0.8.0 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-0285

Produtos afetados

Webnetwork

Referências · 5

• 🔥 https://exploit-db.com/exploits/18416 · Exploit
• http://stone-ware.com/swql.jsp?kb=d1960 · Aviso do Fabricante
• http://stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0285 · Nota de Segurança
• http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html · Nota