SecBoard
Zurück zur CVE-Übersicht

CVE-2009-2163

MEDIUM(4.3)

AV:N/AC:M/Au:N/C:N/I:P/A:N

Risk Signal Score12/100 — NIEDRIG
  • CVSS 4.3 — Mittel

EPSS-Score

3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

4.3

Technische Schwere

Beschreibung

Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the sc_error parameter.

Referenzen