Lucene search

PRIOn knowledge basePRION:CVE-2012-10002

HistoryJan 03, 2023 - 9:15 a.m.

Cross site scripting

2023-01-0309:15:00

PRIOn knowledge base

www.prio-n.com

ahmyi rivettracker

cross site scripting

css.php

remote

vulnerability

patch

45a0f33876d58cb7e4a0f17da149e58fc893b858

vdb-217267

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%

JSON

A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument set_css leads to cross site scripting. The attack can be launched remotely. The patch is named 45a0f33876d58cb7e4a0f17da149e58fc893b858. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217267.

CPENameOperatorVersion
rivettrackereq< 2012313

CPE	Name	Operator	Version
	rivettracker	eq	< 2012313

References

github.com/ahmyi/rivettracker/commit/45a0f33876d58cb7e4a0f17da149e58fc893b858

github.com/ahmyi/rivettracker/pull/1

vuldb.com/?ctiid.217267

vuldb.com/?id.217267