Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2001-1516
cve-2001-1516
cross-site scripting
phpreview
0.9.0 rc2
vulnerability
remote attackers
web script
html.
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.7%
Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews.
Affected configurations
Node
hans_woltersphpreviewMatch0.1
ORhans_woltersphpreviewMatch0.2
ORhans_woltersphpreviewMatch0.2.1
ORhans_woltersphpreviewMatch0.9_final
ORhans_woltersphpreviewMatch0.9_rc1
ORhans_woltersphpreviewMatch0.9_rc2
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.7%
Related for CVE-2001-1516