6.8

CVE-2005-1448

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
S9y ≫ Serendipity Version 0.7
S9y ≫ Serendipity Version 0.7.1
S9y ≫ Serendipity Version 0.7_beta1
S9y ≫ Serendipity Version 0.7_beta2
S9y ≫ Serendipity Version 0.7_beta3
S9y ≫ Serendipity Version 0.7_beta4
S9y ≫ Serendipity Version 0.7_rc1
S9y ≫ Serendipity Version 0.8_beta5
S9y ≫ Serendipity Version 0.8_beta6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.34% 0.676
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/15145
Patch
Vendor Advisory
http://www.s9y.org/63.html#A9
Patch
http://www.osvdb.org/15876
Patch
http://www.securityfocus.com/bid/13411
Patch