Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1000010

Опубликовано: 04 фев. 2019
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in 1.4.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*
Версия до 1.3.2 (включая)

EPSS

Процентиль: 45%
0.00223
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
debian
около 7 лет назад

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS ...

CVSS3: 6.1
github
больше 3 лет назад

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in 1.4.

EPSS

Процентиль: 45%
0.00223
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79