4.3
CVE-2015-2982
- EPSS 1.17%
- Veröffentlicht 22.08.2015 21:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle vultures@jpcert.or.jp
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php Kobo ≫ Photo Gallery Cms Free Version1.0.0
Php Kobo ≫ Photo Gallery Cms Free Version1.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.633 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://jvn.jp/en/jp/JVN69175956/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000113
http://www.php-factory.net/trivia/16.php