PT-2006-4158 · Namo · Namo Deepsearch
CVSS v2.0
2.6
Low
| Vector | AV:N/AC:H/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Namo DeepSearch version 4.5
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the
p parameter in the mclient.cgi component.Recommendations
For Namo DeepSearch version 4.5, avoid using the
p parameter in the mclient.cgi component until a fix is available. As a temporary workaround, consider restricting access to the mclient.cgi component to minimize the risk of exploitation.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Namo Deepsearch