Описание
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.2.1-1ubuntu1 |
| hardy | released | 3.0.0-4ubuntu1.3 |
| lucid | released | 3.1.0-9ubuntu1.2 |
| maverick | released | 3.1.0-9ubuntu2.2 |
| natty | released | 3.2.0-3ubuntu4.2 |
| oneiric | not-affected | 3.2.1-1ubuntu1 |
| upstream | released | 3.2.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC ...
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.
EPSS
4.3 Medium
CVSS2