NVD

Id
14388  
Name
CVE-2010-2957  
Description
Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-09-10  
Modified Date
2010-09-10  
Seq
2010-2957  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79695 14388 CVE-2010-2957 http://blog.s9y.org/archives/223-Serendipity-1.5.4-released.html  View
79696 14388 CVE-2010-2957 http://www.htbridge.ch/advisory/xss_vulnerability_in_serendipity.html  View
79697 14388 CVE-2010-2957 [oss-security] 20100829 CVE request: serendipity < 1.5.4 xss  View
79698 14388 CVE-2010-2957 [oss-security] 20100831 Re: CVE request: serendipity < 1.5.4 xss  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37205 JVNDB-2010-002990 Serendipity におけるクロスサイトスクリプティングの脆弱性 Serendipity には、Remember me ログインが有効な際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2957 45537 CVE-2010-2957 14388 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002990.html 2010-08-27 2012-03-27 View