Lucene search

MitreCVE-2023-41445

HistorySep 27, 2023 - 11:15 p.m.

CVE-2023-41445

2023-09-2723:15:10

CWE-79

mitre

web.nvd.nist.gov

cve-2023-41445

cross site scripting

phpkobo

ajaxnewticker

index.php

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.

Affected configurations

Nvd

Node

phpkoboajaxnewstickerMatch1.0.5

VendorProductVersionCPE
phpkoboajaxnewsticker1.0.5cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpkobo	ajaxnewsticker	1.0.5	cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:::::::*

References

ajaxnewsticker.com

phpkobo.com

gist.github.com/RNPG/84cac1b949bab0e4c587a668385b052d

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

52.4%

JSON

Related for CVE-2023-41445