PT-2003-2143 · E107 · E107

Published 2003-10-29 · Updated 2017-07-11 · CVE-2003-1191

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions e107 versions 0.554 through 0.603

Description The issue allows remote attackers to cause a denial of service, where pages fail to load, by submitting HTML in the Name field. This prevents the main.php form from being loaded.

Recommendations For versions 0.554 through 0.603, consider validating and sanitizing user input in the Name field to prevent HTML injection and subsequent denial of service. As a temporary workaround, restrict the ability to submit HTML in the Name field until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2003-1191

Affected Products

E107

References · 9

• 🔥 https://exploit-db.com/exploits/23311 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-10/0313.html · Exploit
• 🔥 http://securityfocus.com/bid/8930 · Exploit
• 🔥 http://osvdb.org/2753 · Exploit
• http://secunia.com/advisories/10115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1191 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13553 · Note
• http://hackingheaven.com/index.php?name=PNphpBB2&file=viewtopic&t=21 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1191 · Note