Описание
Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| cakephp | fixed | 1.1.13.4450-1 | package |
EPSS
Процентиль: 62%
0.00427
Низкий
Связанные уязвимости
nvd
больше 19 лет назад
Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third party information.
CVSS3: 6.5
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in CakePHP
EPSS
Процентиль: 62%
0.00427
Низкий