PT-2004-2445 · Phpkit · Phpkit

Steve · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1537

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHPKIT versions 1.6.03 through 1.6.1

Description A cross-site scripting (XSS) issue allows remote attackers to execute arbitrary web script. The issue is related to the img parameter in the popup.php file.

Recommendations For PHPKIT versions 1.6.03 through 1.6.1, consider disabling the img parameter in the popup.php file until a patch is available. Restrict access to the popup.php file to minimize the risk of exploitation. Avoid using the img parameter in the affected popup.php file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1537

Affected Products

Phpkit

References · 7

• 🔥 http://securityfocus.com/bid/11725 · Exploit
• 🔥 https://exploit-db.com/exploits/24762 · Exploit
• http://secunia.com/advisories/13262 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1537 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18204 · Note
• http://marc.info/?l=bugtraq&m=110117116115493&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1537 · Note