Lucene search

K
cvelistVulDBCVELIST:CVE-2008-10001
HistoryMar 28, 2022 - 8:45 p.m.

CVE-2008-10001 Pro2col Stingray FTS cross site scriting

2022-03-2820:45:49
CWE-80
VulDB
www.cve.org

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

37.0%

A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CNA Affected

[
  {
    "product": "Stingray FTS",
    "vendor": "Pro2col",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

37.0%

Related for CVELIST:CVE-2008-10001