4.3
CVE-2005-4516
- EPSS 2.06%
- Veröffentlicht 28.12.2005 01:03:00
- Zuletzt bearbeitet 16.06.2026 22:18:56
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php Fusion ≫ Php Fusion Version6.00.200
Php Fusion ≫ Php Fusion Version6.00.204
Php Fusion ≫ Php Fusion Version6.00.205
Php Fusion ≫ Php Fusion Version6.00.206
Php Fusion ≫ Php Fusion Version6.00.207
Php Fusion ≫ Php Fusion Version6.00.300
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.06% | 0.788 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/18190/
http://securityreason.com/securityalert/272
http://www.osvdb.org/22048
http://www.osvdb.org/22050
http://www.securityfocus.com/archive/1/420109/100/0/threaded
http://www.securityfocus.com/bid/15931
http://www.vupen.com/english/advisories/2005/3063