Cross site scripting

2008-04-2721:05:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.

CPENameOperatorVersion
digitalhiveeq2.0 rc2

CPE	Name	Operator	Version
	digitalhive	eq	2.0 rc2

References

www.securityfocus.com/bid/28918

www.z0rlu.ownspace.org/index.php?/archives/65-hive-v2.RC2-XSS.html

exchange.xforce.ibmcloud.com/vulnerabilities/42006