Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2569
HistoryJul 22, 2009 - 12:00 a.m.

CVE-2009-2569

2009-07-2200:00:00
ubuntu.com
ubuntu.com
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.0%

Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control
Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or
HTML via (1) the nick parameter in a login action to index.php or (2) the
URI in a news request to index.html.

Bugs

Notes

Author Note
mdeslaur PoC: http://packetstorm.linuxsecurity.com/0905-exploits/verlihub-xss.txt

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.0%

Related for UB:CVE-2009-2569