PT-2015-3492 · Unknown · Happy Chat

Publicado 2015-01-01 · Atualizado 2015-01-03 · CVE-2011-5296

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Happy Chat version 1.0

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the "profilo.php" file. This could potentially lead to malicious actions on the affected system.

Recommendations For Happy Chat version 1.0, consider restricting access to the "profilo.php" file or validating and sanitizing the nick parameter to prevent malicious input until a patch is available. As a temporary workaround, avoid using the nick parameter in the affected file to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5296

Produtos afetados

Happy Chat

Referências · 2

• 🔥 https://htbridge.com/advisory/HTB23001 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5296 · Nota de Segurança