PT-2014-8952
CVE-2014-9349
·
تاريخ النشر
2014-12-08
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
RobotStats version 1.0
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the
nom or user agent parameters to the "admin/robots.php" endpoint.Recommendations
For RobotStats version 1.0, as a temporary workaround, consider restricting access to the "admin/robots.php" endpoint until a patch is available. Avoid using the
nom and user agent parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾