CVE-2015-0900

Опубликовано: 31 мар. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://jvn.jp/en/jp/JVN74547976/995592/index.html
http://jvn.jp/en/jp/JVN74547976/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000043
Vendor Advisory
http://www.nishishi.com/cgi/ftsb/20150321.html
Vendor Advisory
http://jvn.jp/en/jp/JVN74547976/995592/index.html
http://jvn.jp/en/jp/JVN74547976/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000043
Vendor Advisory
http://www.nishishi.com/cgi/ftsb/20150321.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nishishi:fumy_teachers_schedule_board:1.10:*:*:*:*:*:*:*

cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.00:*:*:*:*:*:*:*

cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.10:*:*:*:*:*:*:*

cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.20:*:*:*:*:*:*:*

cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.21:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00309

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-c382-mwfr-3hp6

github

больше 3 лет назад