exploitDog

CVE-2006-5499

Опубликовано: 25 окт. 2006

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html
http://secunia.com/advisories/22501
Patch
Vendor Advisory
http://securityreason.com/securityalert/1771
http://securitytracker.com/id?1017100
http://www.hardened-php.net/advisory_112006.136.html
http://www.osvdb.org/29893
http://www.s9y.org/forums/viewtopic.php?t=7356
http://www.securityfocus.com/archive/1/449189/100/0/threaded
http://www.securityfocus.com/bid/20627
http://www.vupen.com/english/advisories/2006/4135
https://exchange.xforce.ibmcloud.com/vulnerabilities/29695
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html
http://secunia.com/advisories/22501
Patch
Vendor Advisory
http://securityreason.com/securityalert/1771
http://securitytracker.com/id?1017100
http://www.hardened-php.net/advisory_112006.136.html
http://www.osvdb.org/29893
http://www.s9y.org/forums/viewtopic.php?t=7356
http://www.securityfocus.com/archive/1/449189/100/0/threaded
http://www.securityfocus.com/bid/20627

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*

Версия до 1.0.1 (включая)

EPSS

Процентиль: 77%

0.01846

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-5499

debian

почти 20 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9 ...

GHSA-h49g-rr57-fm22

github

больше 4 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

EPSS

Процентиль: 77%

0.01846

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other