Lucene search

K
cveMitreCVE-2010-2617
HistoryJul 02, 2010 - 12:44 p.m.

CVE-2010-2617

2010-07-0212:44:44
CWE-79
mitre
web.nvd.nist.gov
32
cve-2010-2617
cross-site scripting
xss
vulnerability
bible.php
php bible search
web script
html
chapter parameter
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

57.2%

Cross-site scripting (XSS) vulnerability in bible.php in PHP Bible Search allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.

Affected configurations

Nvd
Node
paul_mceneryphp_bible_searchMatch0.99
VendorProductVersionCPE
paul_mceneryphp_bible_search0.99cpe:2.3:a:paul_mcenery:php_bible_search:0.99:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

57.2%

Related for CVE-2010-2617