Lucene search

MitreCVE-2010-0371

HistoryJan 21, 2010 - 10:30 p.m.

CVE-2010-0371

2010-01-2122:30:00

CWE-79

mitre

web.nvd.nist.gov

cve-2010-0371

cross-site scripting

xss

hitmaaan gallery 1.3

index.php

web script injection

html injection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters.

Affected configurations

Nvd

Node

hitmaaanhitmaaan_galleryMatch1.3

VendorProductVersionCPE
hitmaaanhitmaaan_gallery1.3cpe:2.3:a:hitmaaan:hitmaaan_gallery:1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hitmaaan	hitmaaan_gallery	1.3	cpe:2.3:a:hitmaaan:hitmaaan_gallery:1.3:::::::*

References

osvdb.org/61801

packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt

secunia.com/advisories/38234

exchange.xforce.ibmcloud.com/vulnerabilities/55704

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Related for CVE-2010-0371