Lucene search

K
jvnJapan Vulnerability NotesJVN:72065744
HistoryJul 23, 2008 - 12:00 a.m.

JVN#72065744 K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting

2008-07-2300:00:00
Japan Vulnerability Notes
jvn.jp
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.3%

K’s CGI Access Log Kaiseki is a program to analyze access to a web page. analysis.cgi included in Access Log Kaiseki (Jcode.pm) contains a cross-site scripting vulnerability.

Impact

An arbitrary script could be executed on the user’s web browser.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

  • Access Log Kaiseki (Jcode.pm) analysis.cgi Ver.1.44 and earlier
    For more information, refer to the developer’s website.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

66.3%

Related for JVN:72065744