7.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.8%
MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an βXML injectionβ issue.
secunia.com/advisories/44182
securityreason.com/securityalert/8245
www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt