PT-2012-2162 · Unknown · Online Subtitles Workshop

M.Jock3R · Published 2012-09-20 · Updated 2012-09-20 · CVE-2011-5185

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Online Subtitles Workshop versions prior to 2.0 rev 131

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the comment parameter in the video comments.php file.

Recommendations For versions prior to 2.0 rev 131, update to version 2.0 rev 131 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-5185

Affected Products

Online Subtitles Workshop

References · 4

• 🔥 http://exploit-db.com/exploits/18035 · Exploit
• 🔥 https://exploit-db.com/exploits/18035 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5185 · Security Note
• http://onlinesubtitles.svn.sourceforge.net/viewvc/onlinesubtitles/video_comments.php?r1=31&r2=131&pathrev=146 · Patch