CVE-2009-2780

Опубликовано: 17 авг. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to category.php, view parameter to (2) login.php and (3) viewlisting.php, page parameter to (4) searchresults.php and (5) toplistings.php, and (6) member parameter to viewmember.php.

Ссылки

http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt
Exploit
http://secunia.com/advisories/36034
Vendor Advisory
http://www.osvdb.org/56564
Exploit
http://www.osvdb.org/56565
Exploit
http://www.osvdb.org/56566
Exploit
http://www.osvdb.org/56567
Exploit
http://www.osvdb.org/56568
Exploit
http://www.osvdb.org/56569
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/52071
http://packetstormsecurity.org/0907-exploits/68classifieds-xss.txt
Exploit
http://secunia.com/advisories/36034
Vendor Advisory
http://www.osvdb.org/56564
Exploit
http://www.osvdb.org/56565
Exploit
http://www.osvdb.org/56566
Exploit
http://www.osvdb.org/56567
Exploit
http://www.osvdb.org/56568
Exploit
http://www.osvdb.org/56569
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/52071

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:68_classifieds:68_classifieds:4.1:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01639

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-mcgx-gc58-pqxx

github

почти 4 года назад