PT-2012-5838 · Peel · Peel Shopping

Cyber-Crystal · Publicado 2012-10-01 · Atualizado 2017-08-29 · CVE-2012-5226

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Peel SHOPPING versions 2.8 through 2.9

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the motclef parameter to "achat/recherche.php" or the PATH INFO to "index.php".

Recommendations For versions 2.8 and 2.9, avoid using the motclef parameter in the "achat/recherche.php" endpoint and restrict access to the PATH INFO in "index.php" until a fix is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-5226

Produtos afetados

Peel Shopping

Referências · 5

• 🔥 http://exploit-db.com/exploits/18422 · Exploit
• 🔥 http://securityfocus.com/bid/51700 · Exploit
• 🔥 https://exploit-db.com/exploits/18422 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72765 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5226 · Nota de Segurança