Lucene search
Ubuntu.comUB:CVE-2009-4839HistoryMay 06, 2010 - 12:00 a.m.
CVE-2009-4839
2010-05-0600:00:00
ubuntu.com
ubuntu.com
15
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
65.5%
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and
Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers
to inject arbitrary web script or HTML via unspecified parameters to (1)
admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3)
base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5)
base_ag_main.php.
Related
cve
cve
CVE-2009-4839
2010-05-06 12:47:23
cvelist
cvelist
CVE-2009-4839
2010-05-05 18:00:00
prion
prion
Cross site scripting
2010-05-06 12:47:00
nvd
nvd
CVE-2009-4839
2010-05-06 12:47:23
openvas
openvas
Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities
2009-10-29 00:00:00
Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities
2009-10-29 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
65.5%
Related for UB:CVE-2009-4839