CVE-2008-4446

Опубликовано: 06 окт. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://japan.nucleuscms.org/bb/viewtopic.php?t=4131
Issue Tracking
Vendor Advisory
http://japan.nucleuscms.org/item/47
Vendor Advisory
http://jvn.jp/en/jp/JVN92651529/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/32123
Third Party Advisory
http://www.securityfocus.com/bid/31590
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45666
Third Party Advisory
VDB Entry
http://japan.nucleuscms.org/bb/viewtopic.php?t=4131
Issue Tracking
Vendor Advisory
http://japan.nucleuscms.org/item/47
Vendor Advisory
http://jvn.jp/en/jp/JVN92651529/index.html
Third Party Advisory
VDB Entry
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000066.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/32123
Third Party Advisory
http://www.securityfocus.com/bid/31590
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45666
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nucleus_cms:nucleus:*:sp1:*:ja:*:*:*:*

Версия до 3.31 (включая)

EPSS

Процентиль: 75%

0.00861

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-g544-5pff-q7rc

github

почти 4 года назад