Lucene search

K
jvnJapan Vulnerability NotesJVN:03859837
HistoryAug 29, 2008 - 12:00 a.m.

JVN#03859837 Blogn vulnerable to cross-site scripting

2008-08-2900:00:00
Japan Vulnerability Notes
jvn.jp
15

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.6%

Blogn from R-ONE Computer is software for creating blogs. Blogn contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the Software
Apply the latest update provided by the vendor.

Products Affected

  • Blogn v1.9.7 and earlier

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.6%

Related for JVN:03859837