4.3

CVE-2004-2525

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
S9y ≫ Serendipity Version 0.3
S9y ≫ Serendipity Version 0.4
S9y ≫ Serendipity Version 0.5
S9y ≫ Serendipity Version 0.5_pl1
S9y ≫ Serendipity Version 0.6
S9y ≫ Serendipity Version 0.6_pl1
S9y ≫ Serendipity Version 0.6_pl2
S9y ≫ Serendipity Version 0.6_pl3
S9y ≫ Serendipity Version 0.6_rc1
S9y ≫ Serendipity Version 0.6_rc2
S9y ≫ Serendipity Version 0.7
S9y ≫ Serendipity Version 0.7_beta1
S9y ≫ Serendipity Version 0.7_beta2
S9y ≫ Serendipity Version 0.7_beta3
S9y ≫ Serendipity Version 0.7_beta4
S9y ≫ Serendipity Version 0.7_rc1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.33% 0.674
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/13357
Patch
Vendor Advisory
http://securitytracker.com/id?1012383
Patch
http://sourceforge.net/tracker/index.php?func=detail&aid=1076762&group_id=75065&atid=542822
http://www.osvdb.org/12177
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11790
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18322