PT-2011-4577 · Sonexis · Sonexis Conferencemanager

Rob Kraus · Published 2011-09-27 · Updated 2012-02-14 · CVE-2011-3687

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.2.11.0

Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting (XSS) attacks. This can be achieved through several parameters in different ASP pages, including txtConferenceID in HostLogin.asp and ParticipantLogin.asp, acp in ForgotPIN.asp, and Description, title, or Heading in Error.asp.

Recommendations For Sonexis ConferenceManager version 9.2.11.0, consider restricting access to the HostLogin.asp, ParticipantLogin.asp, ForgotPIN.asp, and Error.asp pages until a patch is available. As a temporary workaround, avoid using the txtConferenceID, acp, Description, title, and Heading parameters in the affected API endpoints.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-3687

Affected Products

Sonexis Conferencemanager

References · 3

• 🔥 http://solutionary.com/index/SERT/Vuln-Disclosures/Sonexis-XSS-Vulnerabilities.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3687 · Security Note
• http://securityreason.com/securityalert/8400 · Note