CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
76.5%
Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.
Vendor | Product | Version | CPE |
---|---|---|---|
eyeos_project | eyeos | 0.9.0.5 | cpe:/o:eyeos_project:eyeos:0.9.0.5::: |
eyeos_project | eyeos | cpe:/o:eyeos_project:eyeos:::: | |
eyeos_project | eyeos | 0.9.0.2 | cpe:/o:eyeos_project:eyeos:0.9.0.2::: |
eyeos_project | eyeos | 0.8.4 | cpe:/o:eyeos_project:eyeos:0.8.4::: |
eyeos_project | eyeos | 0.9.0.3 | cpe:/o:eyeos_project:eyeos:0.9.0.3::: |
eyeos_project | eyeos | 0.9.0.4 | cpe:/o:eyeos_project:eyeos:0.9.0.4::: |
eyeos_project | eyeos | 0.8.10 | cpe:/o:eyeos_project:eyeos:0.8.10::: |
eyeos_project | eyeos | 0.8.3+r2 | cpe:/o:eyeos_project:eyeos:0.8.3+r2::: |
eyeos_project | eyeos | 0.8.5 | cpe:/o:eyeos_project:eyeos:0.8.5::: |
eyeos_project | eyeos | 0.8.3 | cpe:/o:eyeos_project:eyeos:0.8.3::: |