PT-2008-6071 · Tribiq · Tribiq Cms

Published 2008-11-04 · Updated 2017-08-08 · CVE-2008-4893

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tribiq CMS version 5.0.10a

Description A cross-site scripting (XSS) issue exists due to the ability of remote attackers to inject arbitrary web script or HTML. This is possible via the template path parameter when register globals is enabled.

Recommendations For Tribiq CMS version 5.0.10a, consider disabling the register globals setting to mitigate the risk of exploitation. Additionally, restrict access to the template path parameter in the affected header.inc.php file until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-4893

Affected Products

Tribiq Cms

References · 6

• 🔥 https://exploit-db.com/exploits/6888 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4893 · Security Note
• http://secunia.com/advisories/32548 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46265 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4893 · Note
• http://securityfocus.com/bid/32050 · Note