PT-2012-2170
CVE-2011-5193
·
تاريخ النشر
2012-09-23
·
تاريخ التحديث
2012-10-15
الوصف من
CVSS 2.0
2.6
منخفضةالمقاييسAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Whois Search plugin version 1.4.2.3
Description
The issue is a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the
domain parameter to "index.php" when the WHOIS widget is enabled.Recommendations
For version 1.4.2.3, consider disabling the WHOIS widget until a patch is available. Avoid using the
domain parameter in the affected "index.php" endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾