PT-2006-6666 · Bloo · Bloo
CVE-2006-6019
·
Publicado
2006-11-21
·
Atualizado
2024-02-14
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Bloo version 1.0
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the
lang parameter in the extensions/googiespell/googlespell proxy.php file.Recommendations
For version 1.0, avoid using the
lang parameter in the affected file until the issue is resolved. As a temporary workaround, consider restricting access to the googlespell proxy.php file to minimize the risk of exploitation.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Bloo