Lucene search

[email protected]CVE-2009-1811

HistoryMay 29, 2009 - 4:30 p.m.

CVE-2009-1811

2009-05-2916:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2009

1811

cross-site scripting

xss

mygesuad

remote attackers

web script

html

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in myGesuad 0.9.14 (aka 0.9) allow remote attackers to inject arbitrary web script or HTML via (1) the Page parameter in a List action to modules/ereignis.php, (2) the Kontext parameter in a Search action to modules/kategorie.php, (3) the image parameter to modules/image.php, or (4) the ID parameter in a Detail action to modules/sitzung.php.

Affected configurations

NVD

Node

collectormygesuadMatch0.9.14

CPENameOperatorVersion
collector:mygesuadcollector mygesuadeq0.9.14

CPE	Name	Operator	Version
collector:mygesuad	collector mygesuad	eq	0.9.14

References

secunia.com/advisories/35136

www.securityfocus.com/bid/34998

www.vupen.com/english/advisories/2009/1345

www.exploit-db.com/exploits/8708

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Related for CVE-2009-1811

cvelist1 nvd1 prion1