4.3
CVE-2005-1309
- EPSS 1.25%
- Veröffentlicht 02.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:12:49
- Erkennungen
Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eaden Mckee ≫ Bblog Version 0.7.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.25% | 0.655 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://securitytracker.com/id?1013811
http://sourceforge.net/tracker/index.php?func=detail&aid=1188735&group_id=81992&atid=564683
http://www.osvdb.org/15754
http://www.osvdb.org/15755