Lucene search

K
cvelistMitreCVELIST:CVE-2015-3935
HistoryJun 10, 2015 - 2:00 p.m.

CVE-2015-3935

2015-06-1014:00:00
mitre
www.cve.org

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.php.

5.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%