PT-2008-6344 · Otmanager · Otmanager Cms

Cwh Underground · Published 2008-11-21 · Updated 2017-09-29 · CVE-2008-5202

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions OTManager CMS version 24a

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the conteudo parameter in the index.php file.

Recommendations For OTManager CMS version 24a, avoid using the conteudo parameter in the index.php file until a patch is available. As a temporary workaround, consider validating and sanitizing all user input to prevent malicious code injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5202

Affected Products

Otmanager Cms

References · 5

• 🔥 https://exploit-db.com/exploits/5957 · Exploit
• 🔥 http://securityfocus.com/bid/29992 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5202 · Security Note
• http://securityreason.com/securityalert/4644 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43457 · Note