CVE-2009-3450

Опубликовано: 29 сент. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:radactive:i-load:*:*:*:*:*:*:*:*

Версия до 2008.r2 (включая)

cpe:2.3:a:radactive:i-load:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.6.3.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.4:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.5:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.6:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.7:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.8:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.9:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.10:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.11:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.0.12:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.6.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.3:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.4:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.5:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.6:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.8:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.9:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:1.7.7.11:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:radactive:i-load:2008.2.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00532

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p5fj-j53f-3gwv

github

почти 4 года назад