PT-2007-1969 · Makler · Maklerplus

Published 2007-01-26 · Updated 2017-07-29 · CVE-2007-0509

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MaklerPlus versions prior to 1.2

Description The issue involves unspecified vulnerabilities that could potentially lead to cross-site scripting (XSS) or information leaks. Specifically, it may relate to the slogan parameter in main.tpl, which could be vulnerable to XSS, or to error messages that might leak sensitive information.

Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the main.tpl template and avoiding the use of the slogan parameter until a patch is available. Additionally, review error handling mechanisms to prevent potential information leaks.

Fix

Related Identifiers

CVE-2007-0509

Affected Products

Maklerplus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-0509 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=479940 · Patch
• http://osvdb.org/32950 · Note
• http://secunia.com/advisories/23864 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31734 · Note
• http://securityfocus.com/bid/22206 · Note
• http://vupen.com/english/advisories/2007/0321 · Note