Lucene search

MitreCVE-2023-41446

HistorySep 28, 2023 - 3:15 a.m.

CVE-2023-41446

2023-09-2803:15:11

CWE-79

mitre

web.nvd.nist.gov

cve-2023-41446

xss

phpkobo

ajaxnewticker

vulnerability

security

index.php

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

52.3%

JSON

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.

Affected configurations

Nvd

Node

phpkoboajaxnewstickerMatch1.0.5

VendorProductVersionCPE
phpkoboajaxnewsticker1.0.5cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpkobo	ajaxnewsticker	1.0.5	cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:::::::*

References

ajaxnewsticker.com

phpkobo.com

gist.github.com/RNPG/4bb91170f8ee50b395427f26bc96a1f2

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

52.3%

JSON

Related for CVE-2023-41446