Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-4677

Опубликовано: 08 мар. 2010
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:frank-karau:phpfk_php_forum:7.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00296
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
почти 4 года назад

Cross-site scripting (XSS) vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS

Процентиль: 53%
0.00296
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79