PT-2005-2244
CVE-2005-1231
·
تاريخ النشر
2005-04-24
·
تاريخ التحديث
2008-09-05
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
JAWS version 0.4
Description:
A cross-site scripting (XSS) issue exists in the NewTerm function in GlossaryModel.php, allowing remote attackers to inject arbitrary web script or HTML via the
term or description variables.Recommendations:
For JAWS version 0.4, as a temporary workaround, consider disabling the NewTerm function in GlossaryModel.php until a patch is available. Restrict input for the
term and description variables to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾