CVE-2009-0761

2009-03-0606:50:20

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.6%

JSON

Cross-site scripting (XSS) vulnerability in online.asp in Team Board 1.x allows remote attackers to inject arbitrary web script or HTML via the lookname parameter.

Affected configurations

Nvd

Node

team5.team_board1.0

team5.team_board1.0.1

team5.team_board1.0.2

team5.team_board1.0.3

team5.team_board1.0.4

team5.team_board1.0.5

VendorProductVersionCPE
team5.team_board1.0*cpe:2.3:a:team5.team_board:1.0:*:*:*:*:*:*:*:*
team5.team_board1.0.1*cpe:2.3:a:team5.team_board:1.0.1:*:*:*:*:*:*:*:*
team5.team_board1.0.2*cpe:2.3:a:team5.team_board:1.0.2:*:*:*:*:*:*:*:*
team5.team_board1.0.3*cpe:2.3:a:team5.team_board:1.0.3:*:*:*:*:*:*:*:*
team5.team_board1.0.4*cpe:2.3:a:team5.team_board:1.0.4:*:*:*:*:*:*:*:*
team5.team_board1.0.5*cpe:2.3:a:team5.team_board:1.0.5:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
team5.team_board	1.0	*	cpe:2.3:a:team5.team_board:1.0::::::::
team5.team_board	1.0.1	*	cpe:2.3:a:team5.team_board:1.0.1::::::::
team5.team_board	1.0.2	*	cpe:2.3:a:team5.team_board:1.0.2::::::::
team5.team_board	1.0.3	*	cpe:2.3:a:team5.team_board:1.0.3::::::::
team5.team_board	1.0.4	*	cpe:2.3:a:team5.team_board:1.0.4::::::::
team5.team_board	1.0.5	*	cpe:2.3:a:team5.team_board:1.0.5::::::::