NVD

Id
51954  
Name
CVE-2009-4837  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/base_stat_alerts.php or (3) base/base_stat_uaddr.php. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2010-05-06  
Modified Date
2012-07-03  
Seq
2009-4837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262737 51954 CVE-2009-4837 http://base.secureideas.net/news.php  View
262738 51954 CVE-2009-4837 http://secureideas.cvs.sourceforge.net/viewvc/secureideas/base-php4/base_ag_common.php?sortby=date&view  View
262739 51954 CVE-2009-4837 http://spl0it.org/files/BASE-XSS/Reflective-notes.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37937 JVNDB-2010-003722 Basic Analysis におけるクロスサイトスクリプティングの脆弱性 Basic Analysis および Security Engine (BASE) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4837 42268 CVE-2009-4837 51954 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003722.html 2010-05-06 2012-06-26 View