Cross site scripting

2009-03-1014:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

Cross-site scripting (XSS) vulnerability in phpDenora before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via an IRC channel name. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
phpdenoraeq1.0.0 rc1
phpdenoraeq1.0.0
phpdenoraeq0.9.4
phpdenoraeq1.0.1
phpdenoraeq1.1.0
phpdenoraeq1.2.1
phpdenoraeq1.0.0 rc2
phpdenoraeq1.0.0 rc3
phpdenoraeq1.2.0
phpdenorale1.2.2

Name	Operator	Version
phpdenora	eq	1.0.0 rc1
phpdenora	eq	1.0.0
phpdenora	eq	0.9.4
phpdenora	eq	1.0.1
phpdenora	eq	1.1.0
phpdenora	eq	1.2.1
phpdenora	eq	1.0.0 rc2
phpdenora	eq	1.0.0 rc3
phpdenora	eq	1.2.0
phpdenora	le	1.2.2

Rows per page:

1-10 of 121

References

osvdb.org/51981

secunia.com/advisories/33960

sourceforge.net/project/shownotes.php?release_id=661189

www.securityfocus.com/bid/33822

exchange.xforce.ibmcloud.com/vulnerabilities/48799