PT-2006-6609 · Mginternet · Mginternet Car Site Manager

Benjamin Moss

+1

·

CVE-2006-5944

·

Publicado

2006-11-17

·

Atualizado

2024-02-14

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions MGinternet Car Site Manager (CSM) (affected versions not specified)
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter in the /csm/asp/listings.asp API endpoint.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-5944

Produtos afetados

Mginternet Car Site Manager