CVE-2001-0991

Опубликовано: 24 июл. 2001

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.

Ссылки

http://www.securityfocus.com/archive/1/198954
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3087
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6887
http://www.securityfocus.com/archive/1/198954
Patch
Vendor Advisory
http://www.securityfocus.com/bid/3087
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6887

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta1:*:*:*:*:*:*:*

cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta2:*:*:*:*:*:*:*

cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta3:*:*:*:*:*:*:*

cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta4:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.16578

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-g8q9-m36q-5j85

github

больше 3 лет назад