PT-2006-6982 · Jab · Jax Guestbook

Nj

·

CVE-2006-6371

·

Publicado

2006-12-07

·

Atualizado

2018-10-17

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions JAB Guest Book (affected versions not specified)
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the author parameter in the pbguestbook.php file.
Recommendations As a temporary workaround, consider restricting the use of the author parameter in the pbguestbook.php file until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-6371

Produtos afetados

Jax Guestbook