CVE-2008-0258

Опубликовано: 15 янв. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Ссылки

http://secunia.com/advisories/28474
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505
Patch
http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992
Exploit
http://www.securityfocus.com/bid/27268
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/39639
http://secunia.com/advisories/28474
Patch
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=568237&group_id=103505
Patch
http://sourceforge.net/tracker/index.php?func=detail&aid=1204199&group_id=103505&atid=634992
Exploit
http://www.securityfocus.com/bid/27268
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/39639

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:php_running_management:phprunman:*:*:*:*:*:*:*:*

Версия до 1.0.2 (включая)

EPSS

Процентиль: 63%

0.00463

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xvmc-29gp-cxx6

github

больше 3 лет назад