PT-2014-8711
CVE-2014-8752
·
تاريخ النشر
2014-12-31
·
تاريخ التحديث
2015-01-03
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
JCE-Tech PHP Video Script (aka Video Niche Script) version 4.0
Description
The issue allows remote attackers to inject arbitrary web script or HTML via the
video or title parameter in view.php, potentially leading to cross-site scripting (XSS) attacks.Recommendations
For JCE-Tech PHP Video Script (aka Video Niche Script) version 4.0, consider validating and sanitizing user input for the
video and title parameters to prevent XSS attacks. As a temporary workaround, restrict access to view.php until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾