Lucene search

PRIOn knowledge basePRION:CVE-2007-6461

HistoryDec 20, 2007 - 12:46 a.m.

Cross site scripting

2007-12-2000:46:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function.

CPENameOperatorVersion
flysprayeq0.9.9
flysprayeq0.9.9.2
flysprayeq0.9.9.1
flysprayeq0.9.9.3

Name	Operator	Version
flyspray	eq	0.9.9
flyspray	eq	0.9.9.2
flyspray	eq	0.9.9.1
flyspray	eq	0.9.9.3

References

flyspray.org/fsa:2

osvdb.org/39256

osvdb.org/39257

secunia.com/advisories/28106

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.4%

JSON

Related for PRION:CVE-2007-6461