Lucene search

[email protected]CVE-2009-3153

HistorySep 10, 2009 - 6:30 p.m.

CVE-2009-3153

2009-09-1018:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-3153

cross-site scripting

xss

x10 mp3 search engine 1.6.5

security vulnerability

nvd

remote attack

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) pic_id parameter to includes/video_ad.php, (2) category parameter to linkvideos_listing.php, id parameter to (3) templates/header1.php and (4) mp3/lyrics.php, key parameter to (5) video_listing.php and (6) adult/video_listing.php, and name parameter to (7) mp3/embed.php and (8) mp3/info.php.

CPENameOperatorVersion
x10media:mp3_search_enginex10media mp3 search engineeq1.6.5

CPE	Name	Operator	Version
x10media:mp3_search_engine	x10media mp3 search engine	eq	1.6.5

References

packetstormsecurity.org/0907-exploits/x10mp3se-xss.txt

secunia.com/advisories/36059

exchange.xforce.ibmcloud.com/vulnerabilities/52165

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

JSON

Related for CVE-2009-3153

prion1 cvelist1