PT-2006-4626 · Osdate · Osdate

Published 2006-07-21 · Updated 2018-10-17 · CVE-2006-3766

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions osDate versions 1.1.7 and earlier

Description The issue allows users to manipulate their ratings by exploiting a parameter that controls the score, specifically the txtrating parameter, allowing them to set a score greater than the intended maximum of 10.

Recommendations For osDate versions 1.1.7 and earlier, as a temporary workaround, consider restricting the use of the txtrating parameter to prevent users from setting scores above the intended maximum until a fix is available.

Fix

Related Identifiers

CVE-2006-3766

Affected Products

Osdate

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-3766 · Security Note
• http://securityfocus.com/archive/1/440592/100/0/threaded · Note
• http://securitytracker.com/id?1016700 · Note
• http://securityfocus.com/archive/1/443198/100/200/threaded · Note
• http://securityfocus.com/archive/1/440490/100/0/threaded · Note