Описание
Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.
Ссылки
- Vendor Advisory
- Patch
- Patch
- Vendor Advisory
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4:*:*:*:*:*:*:*
cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4.1:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00409
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.
EPSS
Процентиль: 61%
0.00409
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other