Lucene search
MitreCVE-2014-2890HistoryApr 22, 2014 - 2:23 p.m.
CVE-2014-2890
2014-04-2214:23:35
CWE-79
mitre
web.nvd.nist.gov
29
cve-2014-2890
cross-site scripting
xss
phpmyid
vulnerability
web script injection
html injection
nvd
security advisory
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
59.1%
Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_error parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error message.
Affected configurations
Node
siegephpmyidMatch0.9
Related
prion
prion
Cross site scripting
2014-04-22 14:23:00
nvd
nvd
CVE-2014-2890
2014-04-22 14:23:35
cvelist
cvelist
CVE-2014-2890
2014-04-22 14:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
59.1%
Related for CVE-2014-2890