CVE-2010-2856

Опубликовано: 25 июл. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Ссылки

http://osvdb.org/66138
http://secunia.com/advisories/40502
Vendor Advisory
http://www.htbridge.ch/advisory/xss_vulnerability_in_oscss.html
Exploit
http://www.securityfocus.com/bid/41510
Exploit
http://www.vupen.com/english/advisories/2010/1770
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60203
http://osvdb.org/66138
http://secunia.com/advisories/40502
Vendor Advisory
http://www.htbridge.ch/advisory/xss_vulnerability_in_oscss.html
Exploit
http://www.securityfocus.com/bid/41510
Exploit
http://www.vupen.com/english/advisories/2010/1770
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/60203

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oscss:oscss:*:*:*:*:*:*:*:*

Версия до 1.2.2 (включая)

cpe:2.3:a:oscss:oscss:1.0:beta:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.0.1:beta:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.1:rc1:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.2:*:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.2.2:rc:*:*:*:*:*:*

cpe:2.3:a:oscss:oscss:1.2.2:rca:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01013

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2g25-9rg6-j46q

github

больше 3 лет назад