Lucene search

K
cve[email protected]CVE-2017-20140
HistoryJul 22, 2022 - 5:15 p.m.

CVE-2017-20140

2022-07-2217:15:08
CWE-80
web.nvd.nist.gov
17
12
vulnerability
itech movie portal script
7.36
cross-site scripting
cve-2017-20140
nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input <img src> leads to basic cross site scripting (Reflected). The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected configurations

Vulners
NVD
Node
itechmovie_portal_scriptMatch7.36

CNA Affected

[
  {
    "product": "Movie Portal Script",
    "vendor": "Itech",
    "versions": [
      {
        "status": "affected",
        "version": "7.36"
      }
    ]
  }
]

Social References

More

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

Related for CVE-2017-20140