PT-2010-5508
CVE-2010-4504
·
تاريخ النشر
2010-12-08
·
تاريخ التحديث
2010-12-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
eSyndiCat Directory version 2.3
Description
The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the
title parameter to API endpoints such as "suggest-category.php" and "suggest-listing.php".Recommendations
For eSyndiCat Directory version 2.3, consider restricting access to the "suggest-category.php" and "suggest-listing.php" API endpoints to minimize the risk of exploitation. Avoid using the
title parameter in these endpoints until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾