NVD

Id
20177  
Name
CVE-2016-4561  
Description
Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-05-10  
Modified Date
2016-05-16  
Seq
2016-4561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
110140 20177 CVE-2016-4561 http://ikiwiki.info/security/#index43h2  View
110141 20177 CVE-2016-4561 http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=32ef584dc5abb6ddb9f794f94ea0b2934967bba7  View
110142 20177 CVE-2016-4561 DSA-3571  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1947 JVNDB-2016-002720 ikiwiki の CGI.pm の cgierror 関数におけるクロスサイトスクリプティングの脆弱性 ikiwiki の CGI.pm の cgierror 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-4561 91067 CVE-2016-4561 20177 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002720.html 2016-05-06 2016-05-18 View