PT-2012-2462 · Stoneware · Webnetwork

Published 2012-01-24 · Updated 2012-01-24 · CVE-2012-0285

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Stoneware webNetwork versions prior to 6.0.8.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For versions prior to 6.0.8.0, update to version 6.0.8.0 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-0285

Affected Products

Webnetwork

References · 5

• 🔥 https://exploit-db.com/exploits/18416 · Exploit
• http://stone-ware.com/swql.jsp?kb=d1960 · Vendor Advisory
• http://stone-ware.com/support/techdocs/kb/d1960/sb_6_0_8.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0285 · Security Note
• http://infosec42.blogspot.com/2012/01/cve-2012-0285-and-cve-2012-0286.html · Note