CVE-2008-1629

Опубликовано: 02 апр. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Комментарий

Additional information can be found at:

http://www.securityfocus.com/bid/28510

Ссылки

http://freshmeat.net/projects/phpkrm/?branch_id=58803&release_id=274667
Patch
http://secunia.com/advisories/29579
Vendor Advisory
http://www.securityfocus.com/bid/28510
https://exchange.xforce.ibmcloud.com/vulnerabilities/41548
http://freshmeat.net/projects/phpkrm/?branch_id=58803&release_id=274667
Patch
http://secunia.com/advisories/29579
Vendor Advisory
http://www.securityfocus.com/bid/28510
https://exchange.xforce.ibmcloud.com/vulnerabilities/41548

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pau_rodriguez:phpkrm:*:*:*:*:*:*:*:*

Версия до 1.4.2 (включая)

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hr5m-ggmx-qvch

github

почти 4 года назад