Lucene search

[email protected]NVD:CVE-2009-4837

HistoryMay 06, 2010 - 12:47 p.m.

CVE-2009-4837

2010-05-0612:47:23

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/base_stat_alerts.php or (3) base/base_stat_uaddr.php. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

secureideasbasic_analysis_and_security_engineRange≤1.4.3

secureideasbasic_analysis_and_security_engineMatch1.1

secureideasbasic_analysis_and_security_engineMatch1.1.2

secureideasbasic_analysis_and_security_engineMatch1.1.3

secureideasbasic_analysis_and_security_engineMatch1.1.4

secureideasbasic_analysis_and_security_engineMatch1.2

secureideasbasic_analysis_and_security_engineMatch1.2.0

secureideasbasic_analysis_and_security_engineMatch1.2.1

secureideasbasic_analysis_and_security_engineMatch1.2.2

secureideasbasic_analysis_and_security_engineMatch1.2.4

secureideasbasic_analysis_and_security_engineMatch1.2.5

secureideasbasic_analysis_and_security_engineMatch1.2.6

secureideasbasic_analysis_and_security_engineMatch1.2.7

secureideasbasic_analysis_and_security_engineMatch1.3.5

secureideasbasic_analysis_and_security_engineMatch1.3.6

secureideasbasic_analysis_and_security_engineMatch1.3.8

secureideasbasic_analysis_and_security_engineMatch1.3.9

References

base.secureideas.net/news.php

secunia.com/advisories/35222

secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_ag_common.php?sortby=date&view

spl0it.org/files/BASE-XSS/Reflective-notes.txt

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Related for NVD:CVE-2009-4837

cve1 cvelist1 ubuntucve1 prion1 openvas2