CVE-2005-1448

Опубликовано: 03 мая 2005

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Ссылки

http://secunia.com/advisories/15145
Patch
Vendor Advisory
http://www.osvdb.org/15876
Patch
http://www.s9y.org/63.html#A9
Patch
http://www.securityfocus.com/bid/13411
Patch
http://secunia.com/advisories/15145
Patch
Vendor Advisory
http://www.osvdb.org/15876
Patch
http://www.s9y.org/63.html#A9
Patch
http://www.securityfocus.com/bid/13411
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.8_beta5:*:*:*:*:*:*:*

cpe:2.3:a:s9y:serendipity:0.8_beta6:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01009

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-1448

debian

почти 21 год назад

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Sere ...

GHSA-fjw5-crgv-6q7v

github

почти 4 года назад