CVE-2009-0487

Опубликовано: 09 фев. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Версия до 1.0.8 (включая)

cpe:2.3:a:mahara:mahara:0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2009-0487

ubuntu

почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post.

CVE-2009-0487

debian

почти 17 лет назад

Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows ...

GHSA-mpr8-g63q-wf2j

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post.

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79