PT-2004-2111
CVE-2004-1146
·
Publicado
2004-12-31
·
Atualizado
2017-07-11
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
CVSTrac versions prior to 1.1.5
Description:
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities are located in the main.c and login.c files, allowing remote attackers to inject arbitrary HTML and web script.
Recommendations:
For versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾