Lucene search

MitreCVE-2011-5305

HistoryJan 01, 2015 - 11:59 a.m.

CVE-2011-5305

2015-01-0111:59:11

CWE-79

mitre

web.nvd.nist.gov

cve-2011-5305

xss

vulnerability

cosmoshop epro 10.05.00

remote attackers

web script

html

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

50.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to cgi-bin/admin/rubrikadmin.cgi, (2) the typ parameter to cgi-bin/admin/artikeladmin.cgi, or (3) the suchbegriff parameter to cgi-bin/admin/shophilfe_suche.cgi.

Affected configurations

Nvd

Node

zaunz_gmbhcosmoshopMatch10.05.00epro

VendorProductVersionCPE
zaunz_gmbhcosmoshop10.05.00cpe:2.3:a:zaunz_gmbh:cosmoshop:10.05.00:*:*:*:epro:*:*:*

Vendor	Product	Version	CPE
zaunz_gmbh	cosmoshop	10.05.00	cpe:2.3:a:zaunz_gmbh:cosmoshop:10.05.00::::epro:::

References

www.htbridge.com/advisory/HTB22878

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

50.3%

JSON

Related for CVE-2011-5305