nvd-json-data-feeds/CVE-2009/CVE-2009-16xx/CVE-2009-1614.json

{
  "id": "CVE-2009-1614",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2009-05-11T20:30:00.297",
  "lastModified": "2024-11-21T01:02:54.557",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form).  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados(XSS) en Leap CMS v0.1.4 permiten a atacantes remotos inyectar HTML o scripts web arbitrarios a trav\u00e9s de (1) el par\u00e1metro msg (alias el mensaje a un comentario de un art\u00edculo) o (2) el par\u00e1metro searchterm (alias el formulario de b\u00fasqueda). NOTA: Algunos de estos detalles se obtienen a partir de informaci\u00f3n de terceros."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "baseScore": 2.6,
          "accessVector": "NETWORK",
          "accessComplexity": "HIGH",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 4.9,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:gowondesigns:leap:0.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E611E6C-54F9-4A63-95BE-104F2D8B7F6E"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://secunia.com/advisories/34943",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.exploit-db.com/exploits/8577",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/34943",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.exploit-db.com/exploits/8577",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}