CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4347

Cross-site scripting (XSS) vulnerability in daloradius-users/login.php in daloRADIUS 0.9-8 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2009-4347

Liran Tal » Daloradius » Version: Any

cpe:2.3:a:liran_tal:daloradius:*
Liran Tal » Daloradius » Version: 0.7

cpe:2.3:a:liran_tal:daloradius:0.7
Liran Tal » Daloradius » Version: 0.8

cpe:2.3:a:liran_tal:daloradius:0.8
Liran Tal » Daloradius » Version: 0.9

cpe:2.3:a:liran_tal:daloradius:0.9
Liran Tal » Daloradius » Version: 0.9-1

cpe:2.3:a:liran_tal:daloradius:0.9-1
Liran Tal » Daloradius » Version: 0.9-2

cpe:2.3:a:liran_tal:daloradius:0.9-2
Liran Tal » Daloradius » Version: 0.9-3

cpe:2.3:a:liran_tal:daloradius:0.9-3
Liran Tal » Daloradius » Version: 0.9-4

cpe:2.3:a:liran_tal:daloradius:0.9-4
Liran Tal » Daloradius » Version: 0.9-5

cpe:2.3:a:liran_tal:daloradius:0.9-5
Liran Tal » Daloradius » Version: 0.9-6

cpe:2.3:a:liran_tal:daloradius:0.9-6
Liran Tal » Daloradius » Version: 0.9-7

cpe:2.3:a:liran_tal:daloradius:0.9-7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4347

Products

Pricing

Contact Us