Overview
- Description
- Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:newtelligence:dasblog:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B94BC97-9711-4141-BB3C-1AAF44CA953B"
},
{
"criteria": "cpe:2.3:a:newtelligence:dasblog:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04655F91-B4AD-4814-8E30-3BF6723DCC01"
},
{
"criteria": "cpe:2.3:a:newtelligence:dasblog:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27188BEA-9C79-4AB1-B50F-860AD5E89E78"
},
{
"criteria": "cpe:2.3:a:newtelligence:dasblog:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DD60052-2378-4499-BF9B-38100AED8B67"
}
],
"operator": "OR"
}
]
}
]