Lucene search

MitreCVE-2009-4866

HistoryMay 11, 2010 - 12:02 p.m.

CVE-2009-4866

2010-05-1112:02:09

CWE-79

mitre

web.nvd.nist.gov

cve-2009-4866

xss

cross-site scripting

search.cgi

msa

simple search 1.0

web security

html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in search.cgi in Matt’s Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

matt_wrightsimple_searchMatch1.0

VendorProductVersionCPE
matt_wrightsimple_search1.0cpe:2.3:a:matt_wright:simple_search:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
matt_wright	simple_search	1.0	cpe:2.3:a:matt_wright:simple_search:1.0:::::::*

References

osvdb.org/56798

packetstormsecurity.org/0908-exploits/simplesearch-xss.txt

secunia.com/advisories/36178

exchange.xforce.ibmcloud.com/vulnerabilities/52311

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

60.3%

JSON

Related for CVE-2009-4866