Lucene search

[email protected]CVE-2009-4699

HistoryMar 15, 2010 - 9:30 p.m.

CVE-2009-4699

2010-03-1521:30:00

CWE-79

[email protected]

web.nvd.nist.gov

xss

skadate dating

remote attackers

injection

web security

html

vulnerabilities

cve-2009-4699

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/auth.php and (2) file_uploader.php.

Affected configurations

NVD

Node

skadateskadate_online_dating_software

skadateskadate_online_dating_softwareMatch5.0

skadateskadate_online_dating_softwareMatch6.0

skadateskadate_online_dating_softwareMatch6.482

CPENameOperatorVersion
skadate:skadate_online_dating_softwareskadate skadate online dating softwareeq*
skadate:skadate_online_dating_softwareskadate skadate online dating softwareeq5.0
skadate:skadate_online_dating_softwareskadate skadate online dating softwareeq6.0
skadate:skadate_online_dating_softwareskadate skadate online dating softwareeq6.482

CPE	Name	Operator	Version
skadate:skadate_online_dating_software	skadate skadate online dating software	eq	*
skadate:skadate_online_dating_software	skadate skadate online dating software	eq	5.0
skadate:skadate_online_dating_software	skadate skadate online dating software	eq	6.0
skadate:skadate_online_dating_software	skadate skadate online dating software	eq	6.482

References

osvdb.org/56544

osvdb.org/56545

secunia.com/advisories/35997

www.exploit-db.com/exploits/9260

www.securityfocus.com/bid/35813

exchange.xforce.ibmcloud.com/vulnerabilities/52004

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Related for CVE-2009-4699

prion1 cvelist1 nvd1