Lucene search
MitreCVE-2009-3512HistoryOct 01, 2009 - 2:30 p.m.
CVE-2009-3512
2009-10-0114:30:01
CWE-79
mitre
web.nvd.nist.gov
21
cve-2009-3512
cross-site scripting
xss
myweight 1.0
remote attackers
html injection
web script injection
nvd
vulnerabilities
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
74.8%
Multiple cross-site scripting (XSS) vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date parameter to user_addfood.php, info parameter to (2) user_forgot_pwd_form.php and (3) user_login.php, and (4) return parameter to user_login.php.
Affected configurations
Node
phplemonmyweightMatch1.0
Related
prion
prion
Cross site scripting
2009-10-01 14:30:00
exploitdb
exploitdb
nvd
nvd
CVE-2009-3512
2009-10-01 14:30:01
cvelist
cvelist
CVE-2009-3512
2009-10-01 14:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
74.8%
Related for CVE-2009-3512