Cross site scripting

2007-08-0801:17:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) action parameters.

CPENameOperatorVersion
openrat_cmseq<= 0.8-beta1

CPE	Name	Operator	Version
	openrat_cms	eq	<= 0.8-beta1

References

www.securityfocus.com/bid/25169

exchange.xforce.ibmcloud.com/vulnerabilities/35748

pridels-team.blogspot.com/2007/08/openrat-vuln.html