Описание
Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.
Ссылки
- Vendor Advisory
- Patch
- Patch
- Vendor Advisory
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4:*:*:*:*:*:*:*
cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.01177
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.
EPSS
Процентиль: 64%
0.01177
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other