PT-2015-3616
CVE-2014-100010
·
تاريخ النشر
2015-01-13
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ClanSphere version 2011.4
Description
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the
where parameter in a list action to "index.php".Recommendations
For ClanSphere version 2011.4, consider restricting access to the
where parameter in the list action to "index.php" until a patch is available. As a temporary workaround, avoid using the where parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾