Lucene search

K
jvnJapan Vulnerability NotesJVN:46869708
HistoryJul 23, 2008 - 12:00 a.m.

JVN#46869708 K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting

2008-07-2300:00:00
Japan Vulnerability Notes
jvn.jp
10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

66.4%

K’s CGI Access Log Kaiseki is a program to analyze access to a web page. analysis.cgi included in Access Log Kaiseki (Jcode.pl) contains a cross-site scripting vulnerability.

Impact

An arbitrary script could be executed on the user’s web browser.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

  • Access Log Kaiseki (jcode.pl) analysis.cgi Ver.1.44 and earlier
    For more information, refer to the developer’s website.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

66.4%

Related for JVN:46869708