Sign-up

ID

VAR-200112-0175


CVE

CVE-2001-1522


TITLE

Imessenger Cross-site scripting XSS Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200112-166

DESCRIPTION

Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. PHP-Nuke is prone to a cross-site scripting vulnerability

Trust: 1.26

sources: NVD: CVE-2001-1522 // BID: 82923 // VULHUB: VHN-4323

AFFECTED PRODUCTS

vendor:francisco burzimodel:php-nukescope:eqversion:8.0_final

Trust: 1.6

vendor:franciscomodel:burzi php-nuke finalscope:eqversion:8.0

Trust: 0.3

sources: BID: 82923 // CNNVD: CNNVD-200112-166 // NVD: CVE-2001-1522

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2001-1522
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200112-166
value: MEDIUM

Trust: 0.6

VULHUB: VHN-4323
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2001-1522
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-4323
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-4323 // CNNVD: CNNVD-200112-166 // NVD: CVE-2001-1522

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-1522

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200112-166

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-200112-166

EXTERNAL IDS

db:NVDid:CVE-2001-1522

Trust: 2.0

db:CNNVDid:CNNVD-200112-166

Trust: 0.7

db:VULN-DEVid:20011215 SECURITY HOLE IN IMESSENGER ( PHP-NUKE )

Trust: 0.6

db:VULN-DEVid:20011215 SERIOUS BUG IN IMESSENGER ( PHP-NUKE )

Trust: 0.6

db:BIDid:82923

Trust: 0.4

db:VULHUBid:VHN-4323

Trust: 0.1

sources: VULHUB: VHN-4323 // BID: 82923 // CNNVD: CNNVD-200112-166 // NVD: CVE-2001-1522

REFERENCES

url:http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html

Trust: 3.0

url:http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0851.html

Trust: 3.0

sources: VULHUB: VHN-4323 // BID: 82923 // CNNVD: CNNVD-200112-166 // NVD: CVE-2001-1522

CREDITS

Unknown

Trust: 0.3

sources: BID: 82923

SOURCES

db:VULHUBid:VHN-4323
db:BIDid:82923
db:CNNVDid:CNNVD-200112-166
db:NVDid:CVE-2001-1522

LAST UPDATE DATE

2024-11-22T22:59:28.998000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-4323date:2008-09-05T00:00:00
db:BIDid:82923date:2001-12-31T00:00:00
db:CNNVDid:CNNVD-200112-166date:2006-09-22T00:00:00
db:NVDid:CVE-2001-1522date:2024-11-20T23:37:53.253

SOURCES RELEASE DATE

db:VULHUBid:VHN-4323date:2001-12-31T00:00:00
db:BIDid:82923date:2001-12-31T00:00:00
db:CNNVDid:CNNVD-200112-166date:2001-12-31T00:00:00
db:NVDid:CVE-2001-1522date:2001-12-31T05:00:00