PT-2005-1932 · Maxthon · Maxthon

Aviv Raff · Published 2005-03-29 · Updated 2016-10-18 · CVE-2005-0905

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Maxthon version 1.2.0

Description The issue allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2 search text property.

Recommendations For Maxthon version 1.2.0, consider restricting access to the m2 search text property to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0905

Affected Products

Maxthon

References · 7

• 🔥 https://exploit-db.com/exploits/25274 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0905 · Security Note
• http://securityfocus.com/bid/12898 · Patch
• http://forum.maxthon.com/forum/index.php?showtopic=18207 · Patch
• http://raffon.net/advisories/maxthon/searchbarid.html · Vendor Advisory
• http://secunia.com/advisories/14712 · Vendor Advisory
• http://marc.info/?l=full-disclosure&m=111175236620942&w=2 · Note