Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1448
cve-2005-1448
cross-site scripting
xss
serendipity
bbcode
vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
Node
s9yserendipityMatch0.7
ORs9yserendipityMatch0.7.1
ORs9yserendipityMatch0.7_beta1
ORs9yserendipityMatch0.7_beta2
ORs9yserendipityMatch0.7_beta3
ORs9yserendipityMatch0.7_beta4
ORs9yserendipityMatch0.7_rc1
ORs9yserendipityMatch0.8_beta5
ORs9yserendipityMatch0.8_beta6
Related
nvd
nvd
CVE-2005-1448
2005-05-03 04:00:00
nessus
nessus
Serendipity BBCode Plugin XSS
2005-04-28 00:00:00
cvelist
cvelist
CVE-2005-1448
2005-05-03 04:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2005-1448