Lucene search
HistoryDec 31, 2009 - 7:30 p.m.
CVE-2009-4522
cve-2009-4522
cross-site scripting
xss
bloofoxcms
security vulnerability
web script injection
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.9%
Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php. NOTE: some of these details are obtained from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bloofox:bloofoxcms | bloofox bloofoxcms | eq | 0.3.5 |
Related
openvas
openvas
bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability
2009-10-20 00:00:00
bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability
2009-10-20 00:00:00
cvelist
cvelist
CVE-2009-4522
2009-12-31 19:00:00
prion
prion
Cross site scripting
2009-12-31 19:30:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.9%
Related for CVE-2009-4522