PT-2011-1587 · Mhonarc · Mhonarc
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
MHonArc version 2.6.16
Description
The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element. This can be achieved with sequences such as
<scr<body>ipt> and </scr<body>ipt>.Recommendations
For MHonArc version 2.6.16, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version. As a temporary workaround, restrict the use of the
lib/mhtxthtml.pl script to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mhonarc