PT-2005-3756 · Pblang · Pblang

Rgod · Published 2005-09-14 · Updated 2017-07-11 · CVE-2005-2894

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PBLang versions 4.65 and earlier

Description A cross-site scripting (XSS) issue exists in the user registration functionality, allowing remote attackers to inject arbitrary web script or PHP code via the location field. This could potentially lead to unauthorized actions on the affected system.

Recommendations For versions 4.65 and earlier, consider validating and sanitizing user input in the location field to prevent XSS attacks. As a temporary workaround, restrict access to the user registration functionality until a fix is available.

Fix

Related Identifiers

CVE-2005-2894

Affected Products

Pblang

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2894 · Security Note
• http://securityfocus.com/bid/14766 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22190 · Note
• http://marc.info/?l=bugtraq&m=112611338417979&w=2 · Note