CVE-2005-3264

Опубликовано: 20 окт. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.

Ссылки

http://irannetjob.com/content/view/141/28/
Exploit
Vendor Advisory
URL Repurposed
http://marc.info/?l=bugtraq&m=112907042504220&w=2
http://secunia.com/advisories/17175/
Vendor Advisory
http://www.securityfocus.com/bid/15078
http://irannetjob.com/content/view/141/28/
Exploit
Vendor Advisory
URL Repurposed
http://marc.info/?l=bugtraq&m=112907042504220&w=2
http://secunia.com/advisories/17175/
Vendor Advisory
http://www.securityfocus.com/bid/15078

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zeroblog:zeroblog:1.1f:*:*:*:*:*:*:*

cpe:2.3:a:zeroblog:zeroblog:1.2a:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00444

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-j942-52ch-wgc2

github

почти 4 года назад