exploitDog

CVE-2015-0967

Опубликовано: 18 апр. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via (1) the search field in plugin/index.html or (2) the title field in the Create Featured Result form in admin/main.jsp.

Ссылки

http://www.kb.cert.org/vuls/id/697316
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/697316
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:searchblox:searchblox:*:*:*:*:*:*:*:*

Версия до 8.1 (включая)

EPSS

Процентиль: 77%

0.01067

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gc8p-3455-wxwc

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via (1) the search field in plugin/index.html or (2) the title field in the Create Featured Result form in admin/main.jsp.

EPSS

Процентиль: 77%

0.01067

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79