Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-1175

Опубликовано: 31 мар. 2009
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:banshee-project:banshee:1.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00318
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu
больше 16 лет назад

Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.

debian
больше 16 лет назад

Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in th ...

github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.

EPSS

Процентиль: 54%
0.00318
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79