CVE-2014-10078

Опубликовано: 23 фев. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.

Ссылки

https://cxsecurity.com/issue/WLB-2018120091
Exploit
Third Party Advisory
https://seclists.org/fulldisclosure/2014/Aug/8
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/46549/
Exploit
Third Party Advisory
VDB Entry
https://cxsecurity.com/issue/WLB-2018120091
Exploit
Third Party Advisory
https://seclists.org/fulldisclosure/2014/Aug/8
Mailing List
Third Party Advisory
https://www.exploit-db.com/exploits/46549/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vembu:storegrid:4.4:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01906

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-7wx2-436r-cm2r