PT-2015-3644 · Flatpress · Flatpress

Publicado 2015-01-13 · Atualizado 2017-09-08 · CVE-2014-100036

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FlatPress version 1.0.2

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI.

Recommendations For FlatPress version 1.0.2, avoid using the content parameter in the default URI until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2014-100036

Produtos afetados

Flatpress

Referências · 5

• 🔥 https://netsparker.com/critical-xss-vulnerabilities-in-flatpress · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-100036 · Nota de Segurança
• http://secunia.com/advisories/57808 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92538 · Nota
• https://github.com/evacchi/flatpress/issues/14 · Nota