PT-2005-1359 · Wings Simulations · Soldner Secret Wars

Luigi Auriemma · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Soldner Secret Wars version 30830

Description The issue is related to a cross-site scripting (XSS) vulnerability in the web interface. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a user message. The message is not filtered or quoted when the administrator views the server logs, making it possible for attackers to execute malicious scripts.

Recommendations For version 30830, ensure that all user input, especially messages, is properly filtered and quoted before being displayed in the server logs to prevent XSS attacks. As a temporary workaround, consider restricting access to the server logs or implementing additional validation for user messages to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0281

Affected Products

Soldner Secret Wars

References · 5

• 🔥 http://securityfocus.com/bid/12162 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0281 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18753 · Note
• http://secunia.com/advisories/13716 · Note
• http://marc.info/?l=bugtraq&m=110486654213504&w=2 · Note