CVE-2009-0245

Опубликовано: 22 янв. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629.

Ссылки

http://jvn.jp/en/jp/JVN36802959/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html
http://secunia.com/advisories/33409
Vendor Advisory
http://usagi-project.org/PRESS/archives/57
Patch
Vendor Advisory
http://www.securityfocus.com/bid/33145
http://jvn.jp/en/jp/JVN36802959/index.html
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html
http://secunia.com/advisories/33409
Vendor Advisory
http://usagi-project.org/PRESS/archives/57
Patch
Vendor Advisory
http://www.securityfocus.com/bid/33145

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:usagi:mynets:*:*:*:*:*:*:*:*

Версия до 1.2.0.1 (включая)

cpe:2.3:a:usagi:mynets:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:usagi:mynets:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:usagi:mynets:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:usagi:mynets:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-h954-r264-chpx

github

почти 4 года назад