PT-2012-3538 · Tidal · Webglimpse

Publicado 2012-03-19 · Atualizado 2018-01-11 · CVE-2012-1787

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component.

Recommendations For Webglimpse versions 2.20.0 and earlier, consider restricting access to the wgarcmin.cgi component until a fix is available, and avoid using the URL, FILE, or DOMAIN parameters in this component to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-1787

Produtos afetados

Webglimpse

Referências · 8

• 🔥 http://securityfocus.com/bid/52170 · Exploit
• 🔥 http://websecurity.com.ua/3089 · Exploit
• 🔥 http://packetstormsecurity.org/files/110219/Webglimpse-Brute-Force-Cross-Site-Scripting.html · Exploit
• 🔥 https://exploit-db.com/exploits/36883 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1787 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73485 · Nota
• http://secunia.com/advisories/48049 · Aviso do Fabricante
• http://osvdb.org/79648 · Nota