Lucene search
Ubuntu.comUB:CVE-2009-3303HistoryNov 24, 2009 - 12:00 a.m.
CVE-2009-3303
2009-11-2400:00:00
ubuntu.com
ubuntu.com
8
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.8%
Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge
4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web
script or HTML via the helpname parameter.
Related
cve
cve
CVE-2009-3303
2009-11-24 17:30:00
openvas
openvas
Debian Security Advisory DSA 1937-1 (gforge)
2009-11-23 00:00:00
Debian: Security Advisory (DSA-1937-1)
2009-11-23 00:00:00
prion
prion
Cross site scripting
2009-11-24 17:30:00
debian
debian
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
2009-11-21 05:30:22
nessus
nessus
Debian DSA-1937-1 : gforge - insufficient input sanitising
2010-02-24 00:00:00
GForge help/tracker.php helpname Parameter XSS
2009-12-01 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-11-25 00:00:00
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
2009-11-25 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.8%
Related for UB:CVE-2009-3303