Lucene search
PRIOn knowledge basePRION:CVE-2007-3559HistoryJul 04, 2007 - 4:30 p.m.
Cross site scripting
2007-07-0416:30:00
PRIOn knowledge base
www.prio-n.com
2
5.7 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
41.1%
Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSION_QUERY constant.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php-fusion | eq | 6.01.9 | |
| php-fusion | eq | 6.01.10 |
5.7 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
41.1%
Related for PRION:CVE-2007-3559