Lucene search
HistoryMar 15, 2010 - 9:30 p.m.
CVE-2009-4714
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.4%
Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php.
Affected configurations
Node
alexandre_amaralxoops_celeparMatch1.0.1
Related
cve
cve
CVE-2009-4714
2022-10-03 16:24:03
checkpoint_advisories
checkpoint_advisories
XOOPS Module Qas codigo SQL Injection (CVE-2009-4714)
2014-11-10 00:00:00
prion
prion
Cross site scripting
2010-03-15 21:30:00
cvelist
cvelist
CVE-2009-4714
2022-10-03 16:24:03
openvas
openvas
Xoops Celepar <= 2.2.4 Multiple Vulnerabilities - Active Check
2010-03-23 00:00:00
Xoops Celepar Multiple Vulnerabilities
2010-03-23 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.4%
Related for NVD:CVE-2009-4714