PT-2005-4777 · Mrcgiguy · Hot Links Pro+1

Published 2005-12-06 · Updated 2011-03-08 · CVE-2005-4041

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MR CGI Guy Hot Links SQL versions 3.1.x Hot Links Pro versions 3.1.x

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the search.cgi component.

Recommendations For MR CGI Guy Hot Links SQL versions 3.1.x, update to a version that fixes this issue. For Hot Links Pro versions 3.1.x, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4041

Affected Products

Hot Links Pro

Mr. Cgi Guy Hot Links Sql-Php

References · 8

• http://secunia.com/advisories/17868 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4041 · Security Note
• http://secunia.com/advisories/17872 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2737 · Note
• http://pridels0.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html · Note
• http://pridels0.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html · Note
• http://vupen.com/english/advisories/2005/2736 · Note
• http://securityfocus.com/bid/15708 · Note