Lucene search
HistoryApr 22, 2014 - 2:23 p.m.
CVE-2014-2890
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
59.1%
Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_error parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error message.
Affected configurations
Node
siegephpmyidMatch0.9
Related
prion
prion
Cross site scripting
2014-04-22 14:23:00
cve
cve
CVE-2014-2890
2014-04-22 14:23:35
cvelist
cvelist
CVE-2014-2890
2014-04-22 14:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
59.1%
Related for NVD:CVE-2014-2890