NVD

Id
13145  
Name
CVE-2010-1625  
Description
Cross-site scripting (XSS) vulnerability in LXR Cross Referencer before 0.9.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the search body and the results page for a search, a different vulnerability than CVE-2009-4497 and CVE-2010-1448.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-24  
Modified Date
2010-06-24  
Seq
2010-1625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72573 13145 CVE-2010-1625 [oss-security] 20100503 Re: CVE request: lxr  View
72574 13145 CVE-2010-1625 [oss-security] 20100506 Re: CVE request: lxr  View
72575 13145 CVE-2010-1625 http://sourceforge.net/projects/lxr/files/stable/lxr-0.9.7/ChangeLog/download  View
72576 13145 CVE-2010-1625 [oss-security] 20100503 Re: CVE request: lxr  View
72577 13145 CVE-2010-1625 [oss-security] 20100506 Re: CVE request: lxr  View
72578 13145 CVE-2010-1625 [oss-security] 20100514 Re: CVE request: lxr  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38946 JVNDB-2010-004731 LXR Cross Referencer におけるクロスサイトスクリプティングの脆弱性 LXR Cross Referencer は、検索の検索本体および結果ページに関連する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-1625 44205 CVE-2010-1625 13145 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004731.html 2010-06-24 2012-09-25 View