Lucene search
HistoryDec 29, 2011 - 11:55 a.m.
CVE-2011-5025
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.9%
Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via (1) the tag parameter to editTag.yaws, (2) the index parameter to showOldPage.yaws, (3) the node parameter to allRefsToMe.yaws, or (4) the text parameter to editPage.yaws.
Affected configurations
Node
yawsyawsMatch1.88
Related
cve
cve
CVE-2011-5025
2011-12-29 11:55:10
ubuntucve
ubuntucve
CVE-2011-5025
2011-12-29 00:00:00
prion
prion
Cross site scripting
2011-12-29 11:55:00
cvelist
cvelist
CVE-2011-5025
2011-12-29 11:00:00
debiancve
debiancve
CVE-2011-5025
2011-12-29 11:55:10
exploitdb
exploitdb
Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting
2011-04-04 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.002
Percentile
52.9%
Related for NVD:CVE-2011-5025