Описание
Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.1.3 (включая)
Одно из
cpe:2.3:a:bioinformatics:htmlawed:*:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.1:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:bioinformatics:htmlawed:1.1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00567
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in Bioinformatics htmLawed 1.1.3 and 1.1.4 allow remote attackers to inject arbitrary web script or HTML via invalid Cascading Style Sheets (CSS) expressions in the style attribute, which is processed by Internet Explorer 7.
EPSS
Процентиль: 68%
0.00567
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79