PT-2013-5299 · Mintboard · Mintboard

Canberk Bolat · Publicado 2013-07-29 · Atualizado 2013-07-30 · CVE-2013-4951

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mintboard version 0.3

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the name or pass parameters in specific files, including views/login.php and views/signup.php.

Recommendations For Mintboard version 0.3, consider restricting access to the views/login.php and views/signup.php files until a patch is available. As a temporary workaround, avoid using the name and pass parameters in these files to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-4951

Produtos afetados

Mintboard

Referências · 6

• 🔥 https://exploit-db.com/exploits/38638 · Exploit
• https://mavitunasecurity.com/xss-vulnerabilities-in-mintboard · Nota
• http://seclists.org/fulldisclosure/2013/Jul/101 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4951 · Nota de Segurança
• http://securityfocus.com/bid/61114 · Nota
• http://osvdb.org/95120 · Nota