exploitDog

GHSA-6353-x462-8qg9

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-1309
http://securitytracker.com/id?1013811
http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683
http://www.osvdb.org/15754
http://www.osvdb.org/15755

EPSS

Процентиль: 66%

0.0125

Низкий

CVE ID

Связанные уязвимости

CVE-2005-1309

ubuntu

больше 21 года назад

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

CVE-2005-1309

nvd

больше 21 года назад

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

EPSS

Процентиль: 66%

0.0125

Низкий

CVE ID