PT-2002-1398 · Snitz · Snitz Forums 2000
CVE-2002-0329
·
Publicado
2002-06-25
·
Atualizado
2016-10-18
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Snitz Forums 2000 versions 3.3.03 and earlier
Description
The issue allows remote attackers to execute arbitrary script as other users via Javascript in an IMG tag. This is a cross-site scripting vulnerability.
Recommendations
For versions 3.3.03 and earlier, update to a version later than 3.3.03 to resolve the issue. As a temporary workaround, consider restricting the use of Javascript in IMG tags to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Snitz Forums 2000