Lucene search
Japan Vulnerability NotesJVN:85748534HistoryJul 29, 2014 - 12:00 a.m.
JVN#85748534: PerlMailer vulnerable to cross-site scripting
2014-07-2900:00:00
Japan Vulnerability Notes
jvn.jp
15
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
57.0%
PerlMailer from Homepage Decorator is a mail form CGI which is used to send mail from a form on a web page. PerlMailer CGI scripts contain a cross-site scripting vulnerability.
Impact
An arbitrary script may be executed on the user’s web browser.
Solution
Update the Software
Apply the latest update provided by the vendor.
Products Affected
- PerlMailer 3.10 and earlier
Related
prion
prion
Cross site scripting
2014-07-29 20:55:00
nvd
nvd
CVE-2014-3897
2014-07-29 20:55:08
cvelist
cvelist
CVE-2014-3897
2014-07-29 20:00:00
cve
cve
CVE-2014-3897
2014-07-29 20:55:08
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
57.0%
Related for JVN:85748534