Vulnerabilities > CVE-2001-1351 - Unspecified vulnerability in Namazu

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

namazu

NVD

Published: 2001-12-25

Updated: 2017-10-10

Summary

Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers.

Vulnerable Configurations

Part	Description	Count
Application	Namazu Namazu Namazu 0.1.0 Namazu Namazu 0.1.1 Namazu Namazu 0.1.2 Namazu Namazu 0.1.3 Namazu Namazu 0.1.4 Namazu Namazu 0.2.0 Namazu Namazu 0.2.1 Namazu Namazu 0.2.2 Namazu Namazu 0.3.0 Namazu Namazu 0.3.1 Namazu Namazu 0.3.2 Namazu Namazu 0.3.3 Namazu Namazu 1.0.0 Namazu Namazu 1.0.1 Namazu Namazu 1.0.2 Namazu Namazu 1.0.3 Namazu Namazu 1.0.4 Namazu Namazu 1.0.4A Namazu Namazu 1.0.4B Namazu Namazu 1.1.0 Namazu Namazu 1.1.0A Namazu Namazu 1.1.1 Namazu Namazu 1.1.1.1 Namazu Namazu 1.1.1.2 Namazu Namazu 1.1.1.3 Namazu Namazu 1.1.1.4 Namazu Namazu 1.1.1.5 Namazu Namazu 1.1.2 Namazu Namazu 1.1.2.1 Namazu Namazu 1.1.2.2 Namazu Namazu 1.1.2.3 Namazu Namazu 1.1.2.4 Namazu Namazu 1.1.2.5 Namazu Namazu 1.2.0 Namazu Namazu 1.2.0.1 Namazu Namazu 1.2.0.2 Namazu Namazu 1.2.0.3 Namazu Namazu 1.2.0.4 Namazu Namazu 1.2.0.5 Namazu Namazu 1.2.1.0 Namazu Namazu 1.3.0.0 Namazu Namazu 1.3.0.1 Namazu Namazu 1.3.0.2 Namazu Namazu 1.3.1.0 Namazu Namazu 1.4.0.0 Namazu Namazu 2.0 Namazu Namazu 2.0.1 Namazu Namazu 2.0.2 Namazu Namazu 2.0.3 Namazu Namazu 2.0.4 Namazu Namazu 2.0.5 Namazu Namazu 2.0.6 Namazu Namazu 2.0.7 Namazu Namazu 2.0.8	114

Redhat

advisories

rhsa

id	RHSA-2001:162

Summary

Vulnerable Configurations

Redhat

References