PT-2005-4562 · Smartppc · Smartppc Pro

CVE-2005-3814

·

Publicado

2005-11-26

·

Atualizado

2024-02-14

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions SmartPPC Pro (affected versions not specified)
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the username parameter in several API endpoints: "directory.php", "frames.php", and "search.php".
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-3814

Produtos afetados

Smartppc Pro