PT-2008-6308 · Rat Cms · The Rat Cms

Published 2008-11-19 · Updated 2018-10-11 · CVE-2008-5164

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions The Rat CMS Pre-Alpha 2

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id parameter to "viewarticle.php" and "viewarticle2.php" and the PATH INFO to "viewarticle.php".

Recommendations For The Rat CMS Pre-Alpha 2, consider restricting access to the viewarticle.php and viewarticle2.php scripts until a patch is available. As a temporary workaround, avoid using the id parameter in these scripts and restrict the PATH INFO to "viewarticle.php" to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5164

Affected Products

The Rat Cms

References · 7

• 🔥 http://securityfocus.com/bid/29959 · Exploit
• 🔥 https://exploit-db.com/exploits/31975 · Exploit
• 🔥 https://exploit-db.com/exploits/31976 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5164 · Security Note
• http://securityreason.com/securityalert/4612 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43378 · Note
• http://securityfocus.com/archive/1/493684/100/0/threaded · Note