Описание
Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:phpspot:php_\&_css_bbs:*:*:*:*:*:*:*:*
cpe:2.3:a:phpspot:php_bbs:*:*:*:*:*:*:*:*
cpe:2.3:a:phpspot:php_bbs_ce:*:*:*:*:*:*:*:*
cpe:2.3:a:phpspot:php_image_capture_bbs:*:*:*:*:*:*:*:*
cpe:2.3:a:phpspot:php_rss_builder:*:*:*:*:*:*:*:*
cpe:2.3:a:phpspot:webshot:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00285
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
почти 4 года назад
Cross-site scripting (XSS) vulnerability in phpspot PHP BBS, PHP Image Capture BBS, PHP & CSS BBS, PHP BBS CE, PHP_RSS_Builder, and webshot, dated before 20090914, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to cookies.
EPSS
Процентиль: 52%
0.00285
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79