Lucene search

PRIOn knowledge basePRION:CVE-2008-0409

HistoryJan 29, 2008 - 12:00 a.m.

Cross site scripting

2008-01-2900:00:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.4%

JSON

Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL.

CPENameOperatorVersion
http_file_servereq<= 2.2b

CPE	Name	Operator	Version
	http_file_server	eq	<= 2.2b

References

secunia.com/advisories/28631

securityreason.com/securityalert/3583

www.rejetto.com/hfs/?f=wn

www.securityfocus.com/archive/1/486872/100/0/threaded

www.securityfocus.com/bid/27423

www.syhunt.com/advisories/hfs-1-template.txt

www.syhunt.com/advisories/hfshack.txt

exchange.xforce.ibmcloud.com/vulnerabilities/39870

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.4%

JSON

Related for PRION:CVE-2008-0409