CVE-2010-0349

Опубликовано: 15 янв. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.

Ссылки

http://jvn.jp/en/jp/JVN33977065/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html
http://secunia.com/advisories/38135
Vendor Advisory
http://webcal.c-3.jp/zeijakusei.html
Vendor Advisory
http://www.osvdb.org/61629
http://jvn.jp/en/jp/JVN33977065/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html
http://secunia.com/advisories/38135
Vendor Advisory
http://webcal.c-3.jp/zeijakusei.html
Vendor Advisory
http://www.osvdb.org/61629

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:c-3.co.jp:webcalenderc3:*:*:*:*:*:*:*:*

Версия до 0.32 (включая)

cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:*:*:*:*:*:*:*

cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:s2:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00357

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-pxc8-mqgf-jh84

github

почти 4 года назад