Lucene search
HistoryMar 10, 2015 - 2:59 p.m.
CVE-2015-2217
cve
2015
2217
xss
vulnerabilities
ultimate php board
myupb
2.2.8
remote attackers
web script
html
search.php
profile.php
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.8%
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the (1) q parameter to search.php or (2) avatar parameter to profile.php.
Affected configurations
Node
myupbultimate_php_boardMatch2.2.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| myupb:ultimate_php_board | myupb ultimate php board | eq | 2.2.7 |
References
Related
openvas
openvas
PHP Board <= 2.2.7 Multiple XSS Vulnerabilities
2015-03-14 00:00:00
packetstorm
packetstorm
Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting
2015-03-05 00:00:00
zdt
zdt
Ultimate PHP Board (UPB) 2.2.7 Cross Site Scripting Vulnerability
2015-03-07 00:00:00
prion
prion
Cross site scripting
2015-03-10 14:59:00
cvelist
cvelist
CVE-2015-2217
2015-03-10 14:00:00
nvd
nvd
CVE-2015-2217
2015-03-10 14:59:08
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.8%
Related for CVE-2015-2217