NVD

Id
86486  
Name
CVE-2017-9249  
Description
Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATH_INFO to readfile.php.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-06-12  
Published
2017-05-28  
Modified Date
2017-06-06  
Seq
2017-9249  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419806 86486 CVE-2017-7944 97978  View
419807 86486 CVE-2017-7944 https://tsublogs.wordpress.com/2017/04/24/xoops-core-2-5-8-1-install-db-cross-site-scripting/  View
419808 86486 CVE-2017-7944 97978  View
419809 86486 CVE-2017-7944 https://tsublogs.wordpress.com/2017/04/24/xoops-core-2-5-8-1-install-db-cross-site-scripting/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68131 JVNDB-2017-004413 Allen Disk におけるクロスサイトスクリプティングの脆弱性 Allen Disk には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-9249 0 CVE-2017-9249 86486 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004413.html 2017-05-09 2017-06-23 View