Lucene search
HistoryJan 16, 2015 - 3:59 p.m.
CVE-2015-1057
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
59.5%
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the “Real Name” value.
Affected configurations
Node
e107e107Match2.0.0
Related
cvelist
cvelist
CVE-2015-1057
2015-01-16 15:00:00
prion
prion
Cross site scripting
2015-01-16 15:59:00
exploitdb
exploitdb
e107 2 Bootstrap CMS - Cross-Site Scripting
2015-01-03 00:00:00
cve
cve
CVE-2015-1057
2015-01-16 15:59:07
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
59.5%
Related for NVD:CVE-2015-1057