PT-2010-1368 · Viart · Viart Helpdesk

Published 2010-01-04 · Updated 2017-08-17 · CVE-2009-4548

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ViArt Helpdesk versions 3.x

Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to various PHP files. This can be achieved by manipulating the category id parameter in files such as "products.php", "article.php", "product details.php", or "reviews.php", the forum id parameter in "forum.php", or the search category id parameter in "products search.php".

Recommendations For ViArt Helpdesk version 3.x, as a temporary workaround, consider restricting access to the vulnerable parameters category id, forum id, and search category id in the respective PHP files until a patch is available. Avoid using these parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2009-4548

Affected Products

Viart Helpdesk

References · 16

• 🔥 https://exploit-db.com/exploits/34494 · Exploit
• 🔥 https://exploit-db.com/exploits/34495 · Exploit
• 🔥 https://exploit-db.com/exploits/34499 · Exploit
• 🔥 http://packetstormsecurity.org/0908-exploits/viarthd-xss.txt · Exploit
• 🔥 https://exploit-db.com/exploits/34498 · Exploit
• 🔥 https://exploit-db.com/exploits/34496 · Exploit
• 🔥 https://exploit-db.com/exploits/34497 · Exploit
• http://secunia.com/advisories/36240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4548 · Security Note
• http://osvdb.org/56881 · Note
• http://osvdb.org/56877 · Note
• http://osvdb.org/56880 · Note
• http://osvdb.org/56882 · Note
• http://osvdb.org/56879 · Note
• http://osvdb.org/56878 · Note