PT-2005-3897 · Perldiver · Perldiver

Donnie Werner · Published 2005-09-27 · Updated 2011-03-08 · CVE-2005-3066

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PerlDiver versions 1.x

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the query string in perldiver.pl. This issue was initially disputed by the vendor but has since been acknowledged.

Recommendations For PerlDiver version 1.x, update to a version where this issue has been addressed, as the vendor has acknowledged the problem.

Exploit

Fix

Related Identifiers

CVE-2005-3066

Affected Products

Perldiver

References · 7

• 🔥 http://scriptsolutions.com/support/showflat.pl?Board=PDBugs&Number=443 · Exploit
• 🔥 http://securitytracker.com/id?1015146 · Exploit
• 🔥 http://exploitlabs.com/files/advisories/EXPL-A-2005-014-perldiver.txt · Exploit
• 🔥 http://scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=443&Search=true&Forum=All_Forums&Words=werner&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=1month&Main=443 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0543.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3066 · Security Note
• http://scriptsolutions.com/support/showthreaded.pl?Cat=&Board=PDBugs&Number=447&page=0&view=collapsed&sb=5&o=186&vc=1#Post447 · Patch