Lucene search

K
jvnJapan Vulnerability NotesJVN:00322303
HistoryOct 26, 2012 - 12:00 a.m.

JVN#00322303: Tokyo BBS vulnerable to cross-site scripting

2012-10-2600:00:00
Japan Vulnerability Notes
jvn.jp
28

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

Tokyo BBS provided by Come on Girls Interface contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Apply a patch
Apply the patch according to the information provided by the developer.
The developer is no longer distributing the product, but provided a patch to address this issue.

Products Affected

  • Tokyo BBS

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

Related for JVN:00322303