Lucene search

PRIOn knowledge basePRION:CVE-2010-1629

HistoryMay 19, 2010 - 10:30 p.m.

Cross site scripting

2010-05-1922:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address.

CPENameOperatorVersion
phorumeq5.2.10 rc1
phorumeq3.2.2
phorumeq5.0.15
phorumeq3.1.1-pre
phorumeq5.2.5
phorumeq5.0.1-alpha
phorumeq5.2.9
phorumeq5.2.12
phorumeq3.4.6
phorumeq5.2.2 beta

Name	Operator	Version
phorum	eq	5.2.10 rc1
phorum	eq	3.2.2
phorum	eq	5.0.15
phorum	eq	3.1.1-pre
phorum	eq	5.2.5
phorum	eq	5.0.1-alpha
phorum	eq	5.2.9
phorum	eq	5.2.12
phorum	eq	3.4.6
phorum	eq	5.2.2 beta

Rows per page:

1-10 of 821

References

osvdb.org/64759

www.openwall.com/lists/oss-security/2010/05/16/2

www.openwall.com/lists/oss-security/2010/05/18/11

www.facebook.com/note.php?note_id=371190874581

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.3%

JSON

Related for PRION:CVE-2010-1629