| |
Vulnerability CVE-2005-0307
Published: 2005-01-25 Modified: 2012-02-12
| Description: |
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters. |
CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.3/10 |
2.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
Partial |
None |
References: |
http://xforce.iss.net/xforce/xfdb/19050
http://www.securityfocus.com/bid/12359
http://marc.theaimsgroup.com/?l=bugtraq&m=110661795632354&w=2
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
