Design/Logic Flaw

2010-04-0616:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors.

CPENameOperatorVersion
wteq2.1.4
wteq2.0.4
wteq2.99.5
wteq1.1.6
wteq2.99.1
wteq2.99.4
wteq2.2.3
wteq2.0.1
wteq2.1.0
wteq3.0.0

Name	Operator	Version
wt	eq	2.1.4
wt	eq	2.0.4
wt	eq	2.99.5
wt	eq	1.1.6
wt	eq	2.99.1
wt	eq	2.99.4
wt	eq	2.2.3
wt	eq	2.0.1
wt	eq	2.1.0
wt	eq	3.0.0

Rows per page:

1-10 of 271

References

secunia.com/advisories/38759

www.osvdb.org/62717

www.securityfocus.com/bid/38541

www.webtoolkit.eu/wt/doc/reference/html/Releasenotes.html