Lucene search

K
cve[email protected]CVE-2009-4767
HistoryApr 20, 2010 - 2:30 p.m.

CVE-2009-4767

2010-04-2014:30:00
CWE-79
web.nvd.nist.gov
23
cve-2009-4767
cross-site scripting
xss
vulnerabilities
plohni shoutbox 1.0
index.php

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text parameters. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
plohni:shoutboxplohni shoutboxeq1.0

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

Related for CVE-2009-4767