exploitDog

GHSA-7j84-q23m-fvj4

Опубликовано: 02 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2009-0933
https://exchange.xforce.ibmcloud.com/vulnerabilities/49138
http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5
http://secunia.com/advisories/34181
http://www.securityfocus.com/bid/34036
http://www.vupen.com/english/advisories/2009/0636

EPSS

Процентиль: 61%

0.01065

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2009-0933

nvd

больше 17 лет назад

Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2009-0933

debian

больше 17 лет назад

Cross-site scripting (XSS) vulnerability in the administrative interfa ...

EPSS

Процентиль: 61%

0.01065

Низкий

CVE ID

Дефекты

CWE-79