PT-2017-11820 · Finecms · Finecms

Lorexxar · Publicado 2017-07-13 · Atualizado 2017-07-16 · CVE-2017-11202

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-12

Description The issue allows for XSS in visitors.php due to the lack of restriction on JavaScript in visited URLs, both during logging and when reading logs.

Recommendations For FineCMS through 2017-07-12, restrict JavaScript in visited URLs during logging and when reading logs to prevent XSS exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-11202

Produtos afetados

Finecms

Referências · 2

• 🔥 http://lorexxar.cn/2017/07/11/Some%20Vulnerability%20for%20FineCMS%20through%202017.7.11/#Stored-XSS-in-visitors-php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11202 · Nota de Segurança