Lucene search

MitreCVE-2009-3204

HistorySep 16, 2009 - 5:30 p.m.

CVE-2009-3204

2009-09-1617:30:00

CWE-79

mitre

web.nvd.nist.gov

xss

stiva forum

vulnerabilities

web security

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) demo.php and (2) forum.php, and the PATH_INFO to (3) include_forum.php.

Affected configurations

Nvd

Node

stivaforumstiva_forumMatch1.0

VendorProductVersionCPE
stivaforumstiva_forum1.0cpe:2.3:a:stivaforum:stiva_forum:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
stivaforum	stiva_forum	1.0	cpe:2.3:a:stivaforum:stiva_forum:1.0:::::::*

References

osvdb.org/57177

osvdb.org/57178

packetstormsecurity.org/0908-exploits/stivaforum-xss.txt

secunia.com/advisories/36409

exchange.xforce.ibmcloud.com/vulnerabilities/52613

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Related for CVE-2009-3204