Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1310

Опубликовано: 21 апр. 2009
Источник: redhat
CVSS2: 2.6
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=496270Firefox Malicious search plugins can inject code into arbitrary sites

EPSS

Процентиль: 74%
0.0086
Низкий

2.6 Low

CVSS2

Связанные уязвимости

ubuntu
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.

nvd
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.

debian
около 16 лет назад

Cross-site scripting (XSS) vulnerability in the MozSearch plugin imple ...

github
около 3 лет назад

Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.

oracle-oval
около 16 лет назад

ELSA-2009-0436: firefox security update (CRITICAL)

EPSS

Процентиль: 74%
0.0086
Низкий

2.6 Low

CVSS2