PT-2005-4659 · Pblang · Pblang
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
PBLang version 4.65
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) "UCP.php" and (2) "SendPm.php".
Recommendations
For PBLang version 4.65, consider disabling access to the "UCP.php" and "SendPm.php" files until a patch is available to prevent exploitation of the XSS issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Pblang