Lucene search

MitreCVE-2005-0309

HistoryFeb 10, 2005 - 5:00 a.m.

CVE-2005-0309

2005-02-1005:00:00

mitre

web.nvd.nist.gov

exponent

0.95

xss

cross-site scripting

vulnerabilities

index.php

mod.php

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter.

Affected configurations

Nvd

Node

exponentexponentMatch0.95

VendorProductVersionCPE
exponentexponent0.95cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
exponent	exponent	0.95	cpe:2.3:a:exponent:exponent:0.95:::::::*

References

marc.info/?l=bugtraq&m=110666998407073&w=2

www.osvdb.org/13188

www.osvdb.org/13190

www.securityfocus.com/bid/12358

exchange.xforce.ibmcloud.com/vulnerabilities/19061

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Related for CVE-2005-0309