exploitDog

CVE-2005-3505

Опубликовано: 05 нояб. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cpanel:cpanel:10.2.0_r82:*:*:*:*:*:*:*

cpe:2.3:a:cpanel:cpanel:10.6.0_r137:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01262

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-99q2-hw6h-hxgm

github

почти 4 года назад

Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as <b>, which are processed by Internet Explorer.

EPSS

Процентиль: 79%

0.01262

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other