Lucene search
MitreCVE-2009-0338HistoryJan 29, 2009 - 6:30 p.m.
CVE-2009-0338
2009-01-2918:30:02
CWE-79
mitre
web.nvd.nist.gov
39
cve-2009-0338
xss
vulnerability
dmxready blog manager
inc_webblogmanager.asp
web script
html
categoryid parameter
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
59.9%
Cross-site scripting (XSS) vulnerability in inc_webblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action.
Affected configurations
Node
dmxreadyblog_managerMatch_nil
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dmxready | blog_manager | _nil | cpe:2.3:a:dmxready:blog_manager:_nil:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Blog Manager - 'categoryId' Cross-Site Scripting
2009-01-16 00:00:00
cvelist
cvelist
CVE-2009-0338
2009-01-29 18:09:00
prion
prion
Cross site scripting
2009-01-29 18:30:00
nvd
nvd
CVE-2009-0338
2009-01-29 18:30:02
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
59.9%
Related for CVE-2009-0338