Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-3334

Опубликовано: 27 окт. 2005
Источник: nvd
CVSS2: 4.3
EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:flyspray:flyspray:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:flyspray:flyspray:0.9.8:*:*:*:*:*:*:*
cpe:2.3:a:flyspray:flyspray:0.9.8:*:dev:*:*:*:*:*

EPSS

Процентиль: 93%
0.10245
Средний

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
почти 20 лет назад

Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.

debian
почти 20 лет назад

Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9. ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters.

EPSS

Процентиль: 93%
0.10245
Средний

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other