Vulnerability Details CVE-2009-2221
Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://jvn.jp/jp/JVN20219071/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html
- http://php.s3.to/bbs/bbs8.php
- http://secunia.com/advisories/35532
- http://jvn.jp/jp/JVN20219071/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000045.html
- http://php.s3.to/bbs/bbs8.php
- http://secunia.com/advisories/35532
Products affected by CVE-2009-2221
-
cpe:2.3:a:php.s3:php-i-board:*
-
cpe:2.3:a:php.s3:php-i-board:1.0
-
cpe:2.3:a:php.s3:php-i-board:1.1