Cross site scripting

2011-02-2119:00:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string.

CPENameOperatorVersion
phpxrefeq0.5
phpxrefeq0.2.1
phpxrefeq0.2
phpxrefeq0.4.1
phpxrefeq0.6
phpxrefeq0.1.1
phpxrefeq0.1.2
phpxrefle0.7
phpxrefeq0.4
phpxrefeq0.3.0

Name	Operator	Version
phpxref	eq	0.5
phpxref	eq	0.2.1
phpxref	eq	0.2
phpxref	eq	0.4.1
phpxref	eq	0.6
phpxref	eq	0.1.1
phpxref	eq	0.1.2
phpxref	le	0.7
phpxref	eq	0.4
phpxref	eq	0.3.0

References

osvdb.org/70855

phpxref.sourceforge.net/Changelog

secunia.com/advisories/42069

websecurity.com.ua/4795/

www.securityfocus.com/bid/46302

exchange.xforce.ibmcloud.com/vulnerabilities/65434