Lucene search
HistoryApr 14, 2015 - 2:59 p.m.
CVE-2015-2781
cve-2015-2781
xss
remote attackers
web script injection
html injection
hotspot express
hotex billing manager 73
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
Affected configurations
Node
hotspot_expresshotex_billing_managerMatch73
| CPE | Name | Operator | Version |
|---|---|---|---|
| hotspot_express:hotex_billing_manager | hotspot express hotex billing manager | eq | 73 |
Related
nvd
nvd
CVE-2015-2781
2015-04-14 14:59:04
packetstorm
packetstorm
HotExBilling Manager 73 Cross Site Scripting
2015-04-06 00:00:00
securityvulns
securityvulns
prion
prion
Cross site scripting
2015-04-14 14:59:00
cvelist
cvelist
CVE-2015-2781
2015-04-14 14:00:00
openvas
openvas
nessus
nessus
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.2%
Related for CVE-2015-2781