CVE-2015-6518

Опубликовано: 18 авг. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) droptable parameter, or (3) table parameter to phpliteadmin.php.

Ссылки

http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/535936/100/0/threaded
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/132580/phpLiteAdmin-1.1-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/535936/100/0/threaded
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpliteadmin:phpliteadmin:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03525

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2015-6518

debian

около 11 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpLiteAdmin 1. ...

GHSA-fvh3-qgxj-vv2x

github

больше 4 лет назад