Lucene search

K
cve[email protected]CVE-2009-0466
HistoryFeb 10, 2009 - 7:00 a.m.

CVE-2009-0466

2009-02-1007:00:24
CWE-79
web.nvd.nist.gov
27
vivvo cms
xss
404 page not found
security vulnerability
cve-2009-0466

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

Cross-site scripting (XSS) vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response.

Affected configurations

NVD
Node
vivvovivvoRange4.1.0
OR
vivvovivvoMatch4.0.1
OR
vivvovivvoMatch4.0.2
OR
vivvovivvoMatch4.0.3
OR
vivvovivvoMatch4.0.4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

Related for CVE-2009-0466