Vulnerability Details CVE-2015-0900
Cross-site scripting (XSS) vulnerability in schedule.cgi in Nishishi Factory Fumy Teacher's Schedule Board 1.10 through 2.21 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://jvn.jp/en/jp/JVN74547976/995592/index.html
- http://jvn.jp/en/jp/JVN74547976/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000043
- http://www.nishishi.com/cgi/ftsb/20150321.html
- http://jvn.jp/en/jp/JVN74547976/995592/index.html
- http://jvn.jp/en/jp/JVN74547976/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000043
- http://www.nishishi.com/cgi/ftsb/20150321.html
Products affected by CVE-2015-0900
-
cpe:2.3:a:nishishi:fumy_teachers_schedule_board:1.10
-
cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.00
-
cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.10
-
cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.20
-
cpe:2.3:a:nishishi:fumy_teachers_schedule_board:2.21