PT-2010-1367 · Viart · Viart Cms

Published 2010-01-04 · Updated 2017-08-17 · CVE-2009-4547

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ViArt CMS versions 3.x

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited via the category id parameter to "forums.php", or the forum id parameter to "forum.php" or "forum topic new.php".

Recommendations For ViArt CMS version 3.x, update to a version that includes a fix for these XSS vulnerabilities. As a temporary workaround, consider restricting access to the "forums.php", "forum.php", and "forum topic new.php" scripts until a patch is available. Avoid using the category id and forum id parameters in the affected scripts until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4547

Affected Products

Viart Cms

References · 11

• 🔥 http://securityfocus.com/bid/36003 · Exploit
• 🔥 https://exploit-db.com/exploits/33155 · Exploit
• 🔥 https://exploit-db.com/exploits/33158 · Exploit
• 🔥 http://packetstormsecurity.org/0908-exploits/viartcms-xss.txt · Exploit
• 🔥 https://exploit-db.com/exploits/33157 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4547 · Security Note
• http://secunia.com/advisories/36241 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52371 · Note
• http://osvdb.org/56883 · Note
• http://osvdb.org/56885 · Note
• http://osvdb.org/56884 · Note