PT-2014-2478
CVE-2013-1413
·
تاريخ النشر
2014-02-11
·
تاريخ التحديث
2014-02-12
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
i-doit open versions 0.9.9-7 and earlier
i-doit pro versions 1.0 and earlier
i-doit pro version 1.0.2
Description
The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors due to multiple cross-site scripting (XSS) vulnerabilities. This occurs when the 'sanitize user input' flag is not enabled.
Recommendations
For i-doit open versions 0.9.9-7 and earlier, enable the 'sanitize user input' flag to prevent XSS attacks.
For i-doit pro versions 1.0 and earlier, enable the 'sanitize user input' flag to prevent XSS attacks.
For i-doit pro version 1.0.2, enable the 'sanitize user input' flag to prevent XSS attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾