CVE-2003-0404

Опубликовано: 30 июн. 2003

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

Ссылки

http://marc.info/?l=bugtraq&m=105406028027360&w=2
http://www.iss.net/security_center/static/12071.php
Vendor Advisory
http://www.s21sec.com/es/avisos/s21sec-023-en.txt
Vendor Advisory
http://www.securityfocus.com/bid/7687
Exploit
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=105406028027360&w=2
http://www.iss.net/security_center/static/12071.php
Vendor Advisory
http://www.s21sec.com/es/avisos/s21sec-023-en.txt
Vendor Advisory
http://www.securityfocus.com/bid/7687
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vignette:content_suite:5.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:content_suite:6.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:content_suite:7.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:4.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:5.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00416

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2fcg-48pf-99vm

github

больше 3 лет назад