PT-2015-3623

CVE-2014-100017

·

Publicado

2015-01-13

·

Atualizado

2017-09-08

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions PhpOnlineChat version 3.0
Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the message field in the canned opr.php file.
Recommendations For PhpOnlineChat version 3.0, consider validating and sanitizing user input in the message field to prevent arbitrary web script or HTML injection. As a temporary workaround, restrict access to the canned opr.php file until a patch is available.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2014-100017
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com