PT-2009-5013 · Datacheck Solutions · Linkpal
Published
2009-07-27
·
Updated
2009-07-27
·
CVE-2009-2613
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
DataCheck Solutions LinkPal versions 1.x
Description
The issue allows remote attackers to inject arbitrary web script or HTML via the
page parameter to various components, including (1) "z loginfailed.asp", (2) "z admin login.asp", and (3) "z forgot.asp". This could potentially lead to cross-site scripting (XSS) attacks.Recommendations
For DataCheck Solutions LinkPal versions 1.x, consider restricting access to the affected components, such as "z loginfailed.asp", "z admin login.asp", and "z forgot.asp", to minimize the risk of exploitation. Avoid using the
page parameter in these components until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linkpal