CVE-2009-3299

Опубликовано: 03 нояб. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://eduforge.org/frs/shownotes.php?release_id=546
Patch
http://eduforge.org/frs/shownotes.php?release_id=547
http://mahara.org/interaction/forum/topic.php?id=1170
http://secunia.com/advisories/37217
Vendor Advisory
http://secunia.com/advisories/37218
Vendor Advisory
http://www.debian.org/security/2009/dsa-1924
http://www.osvdb.org/59583
http://www.securityfocus.com/bid/36892
Patch
http://www.vupen.com/english/advisories/2009/3101
Patch
Vendor Advisory
http://eduforge.org/frs/shownotes.php?release_id=546
Patch
http://eduforge.org/frs/shownotes.php?release_id=547
http://mahara.org/interaction/forum/topic.php?id=1170
http://secunia.com/advisories/37217
Vendor Advisory
http://secunia.com/advisories/37218
Vendor Advisory
http://www.debian.org/security/2009/dsa-1924
http://www.osvdb.org/59583
http://www.securityfocus.com/bid/36892
Patch
http://www.vupen.com/english/advisories/2009/3101
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Версия до 1.0.12 (включая)

cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.0.11:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:mahara:mahara:1.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00604

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2009-3299

ubuntu

около 16 лет назад

CVE-2009-3299

debian

около 16 лет назад

Cross-site scripting (XSS) vulnerability in the resume blocktype in Ma ...

GHSA-3rgv-v89r-wjff

github

больше 3 лет назад

EPSS

Процентиль: 69%

0.00604

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79