Zurück zur CVE-Übersicht
CVE-2009-2240
MEDIUM(4.3)AV:N/AC:M/Au:N/C:N/I:P/A:N
Risk Signal Score11/100 — NIEDRIG
- CVSS 4.3 — Mittel
EPSS-Score
1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
4.3
Technische Schwere
Beschreibung
Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Referenzen
- http://jvn.jp/en/jp/JVN57036470/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html
- http://secunia.com/advisories/35148
- http://www.ad2000.co.jp/service/index.html
- http://www.securityfocus.com/bid/35068
- http://jvn.jp/en/jp/JVN57036470/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html
- http://secunia.com/advisories/35148
- http://www.ad2000.co.jp/service/index.html
- http://www.securityfocus.com/bid/35068