Lucene search
PRIOn knowledge basePRION:CVE-2009-3303HistoryNov 24, 2009 - 5:30 p.m.
Cross site scripting
2009-11-2417:30:00
PRIOn knowledge base
www.prio-n.com
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
47.1%
Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter.
Related
cve
cve
CVE-2009-3303
2009-11-24 17:30:00
ubuntucve
ubuntucve
CVE-2009-3303
2009-11-24 00:00:00
openvas
openvas
Debian Security Advisory DSA 1937-1 (gforge)
2009-11-23 00:00:00
Debian: Security Advisory (DSA-1937-1)
2009-11-23 00:00:00
debian
debian
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
2009-11-21 05:30:22
nessus
nessus
GForge help/tracker.php helpname Parameter XSS
2009-12-01 00:00:00
Debian DSA-1937-1 : gforge - insufficient input sanitising
2010-02-24 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-11-25 00:00:00
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
2009-11-25 00:00:00
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
47.1%
Related for PRION:CVE-2009-3303