exploitDog

GHSA-33v9-rqhp-2p82

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2010-1707
http://piwigo.org/code/wsvn/Piwigo?op=revision&rev=5936
http://www.vupen.com/english/advisories/2010/1034

EPSS

Процентиль: 56%

0.00902

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2010-1707

ubuntu

больше 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.

CVE-2010-1707

nvd

больше 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.

CVE-2010-1707

debian

больше 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in register.php in ...

EPSS

Процентиль: 56%

0.00902

Низкий

CVE ID

Дефекты

CWE-79