Lucene search
HistoryAug 30, 2005 - 11:45 a.m.
CVE-2005-2721
cve-2005-2721
web security
cross-site scripting
xss
vulnerability
foojan php weblog
nvd
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.
Affected configurations
Node
foojanphp_weblog
| CPE | Name | Operator | Version |
|---|---|---|---|
| foojan:php_weblog | foojan php weblog | eq | * |
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.3%
Related for CVE-2005-2721