PT-2006-3792 · Osads · Osads Alliance Database

Published 2006-06-06 · Updated 2017-07-20 · CVE-2006-2874

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OSADS Alliance Database versions prior to 1.4

Description The issue is related to a "Security Leak to lock in HTML-Code" and may be due to a cross-site scripting (XSS) vulnerability involving comments. This could potentially allow for the injection of malicious HTML code.

Recommendations For versions prior to 1.4, update to version 1.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of comments to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-2874

Affected Products

Osads Alliance Database

References · 7

• http://securityfocus.com/bid/18280 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2874 · Security Note
• http://secunia.com/advisories/20441 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=422081 · Patch
• http://osads.sourceforge.net/viewtopic.php?t=3 · Note
• http://vupen.com/english/advisories/2006/2143 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26914 · Note