|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 7010 CVE : CVE-2010-0606 CWE : CWE-79 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : Yes Exploit Available : No Credit : nahuel.grisolia Published : 13.02.2010
Advisory Content : Advisory Name: Reflected Cross-Site Scripting (XSS) in osTicket Vulnerability Class: Reflected Cross-Site Scripting (XSS) Release Date: 2010-02-09 Affected Applications: Confirmed in osTicket 1.6 RC5. Other versions may also be affected Affected Platforms: Multiple Local / Remote: Remote Severity: Medium – CVSS: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) Researcher: Nahuel Grisolía Vendor Status: Acknowledged/Fixed. New release available: osTicket 1.6 Stable or check http://osticket.com/forums/project.php?issueid=176 Vulnerability Description: A reflected Cross Site Scripting vulnerability was found in osTicket 1.6 RC5, because the application fails to sanitize user-supplied input. Any logged-in user can trigger the vulnerability. Proof of Concept: http://x.x.x.x/upload/scp/ajax.php?api=1%3Cscript%3Ealert%28%22xss%22%29;%3 C/script%3E&f= cannedResp http://x.x.x.x/upload/scp/ajax.php?api=kbase&f=%3Cscript%3Ealert%28%22xss%2 2%29;%3C/script %3E Impact: An affected user may unintentionally execute scripts or actions written by an attacker. In addition, an attacker may obtain authorization cookies that would allow him to gain unauthorized access to the application. Solution: Upgrade to osTicket 1.6 Stable or check http://osticket.com/forums/project.php?issueid=176 Vendor Response: January 9, 2010 – First Contact January 10, 2010 / February 4, 2010 – Updates on resolution February 9, 2010 – Latest version and patch available February 9, 2010 – Public Disclosure of the Vulnerability Contact Information: For more information regarding the vulnerability feel free to contact the researcher at nahuel.grisolia <at> gmail <dot> com References : http://osticket.com/forums/project.php?issueid=176
http://www.securityfocus.com/bid/38166
http://secunia.com/advisories/38515
http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-ReflectedXSS.pdf  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |