CVE-2006-4964

Опубликовано: 23 сент. 2006

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker.

Ссылки

http://jvn.jp/jp/JVN%2346630603/index.html
http://secunia.com/advisories/22050
Patch
Vendor Advisory
http://www.maxdev.com/Article605.phtml
Patch
URL Repurposed
http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtml
Patch
URL Repurposed
http://www.securityfocus.com/bid/20133
Patch
http://www.vupen.com/english/advisories/2006/3732
http://jvn.jp/jp/JVN%2346630603/index.html
http://secunia.com/advisories/22050
Patch
Vendor Advisory
http://www.maxdev.com/Article605.phtml
Patch
URL Repurposed
http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtml
Patch
URL Repurposed
http://www.securityfocus.com/bid/20133
Patch
http://www.vupen.com/english/advisories/2006/3732

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maxdev:md-pro:*:*:*:*:*:*:*:*

Версия до 1.0.76 (включая)

cpe:2.3:a:maxdev:md-pro:1.0.72:*:*:*:*:*:*:*

cpe:2.3:a:maxdev:md-pro:1.0.73:*:*:*:*:*:*:*

cpe:2.3:a:maxdev:md-pro:1.0.75:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00536

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g362-3xch-jq8f

github

почти 4 года назад