Lucene search

K
jvnJapan Vulnerability NotesJVN:53267766
HistoryOct 20, 2008 - 12:00 a.m.

JVN#53267766 MyNETS cross-site scripting vulnerability

2008-10-2000:00:00
Japan Vulnerability Notes
jvn.jp
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.3%

MyNETS from Usagi Project is an open source SNS (Social Networking Service) software. MyNETS contains a cross-site scripting vulnerability.

Impact

If a user views a specially crafted web page, an arbitrary script may be executed on the user’s web browser. As a result, user information may be disclosed or a user may be directed to an unintended site.

Solution

Update the Software
Update to the latest version according to the information provided by the developers.

Products Affected

  • MyNETS Ver1.2.0 and earlier

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.3%

Related for JVN:53267766