Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-2278
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
50.6%
Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables.
Affected configurations
Node
portail_web_phpportail_web_phpMatch0.99
| Vendor | Product | Version | CPE |
|---|---|---|---|
| portail_web_php | portail_web_php | 0.99 | cpe:2.3:a:portail_web_php:portail_web_php:0.99:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
50.6%
Related for NVD:CVE-2002-2278