Lucene search

K
cveMitreCVE-2009-4888
HistoryJun 11, 2010 - 2:30 p.m.

CVE-2009-4888

2010-06-1114:30:16
CWE-79
mitre
web.nvd.nist.gov
33
cve-2009-4888
xss
phortail
poster.php
web script injection
html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.007

Percentile

81.2%

Cross-site scripting (XSS) vulnerability in poster.php in PHortail 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) pseudo, (2) email, (3) ti, and (4) txt parameters.

Affected configurations

Nvd
Node
nskatephortailMatch1.2.1
VendorProductVersionCPE
nskatephortail1.2.1cpe:2.3:a:nskate:phortail:1.2.1:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.007

Percentile

81.2%

Related for CVE-2009-4888