PT-2013-5257
CVE-2013-4880
·
تاريخ النشر
2013-08-13
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
BigTree CMS versions 4.0 RC2 and earlier
Description
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the
module parameter in the /core/admin/modules/developer/modules/views/add.php endpoint.Recommendations
For BigTree CMS versions 4.0 RC2 and earlier, consider disabling access to the
/core/admin/modules/developer/modules/views/add.php endpoint until a fix is available, and avoid using the module parameter in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾