CVE-2014-1223

Опубликовано: 27 фев. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information.

Ссылки

http://secunia.com/advisories/56779
Vendor Advisory
http://www.securityfocus.com/archive/1/531223/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/65739
Exploit
Third Party Advisory
VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1223
Exploit
http://secunia.com/advisories/56779
Vendor Advisory
http://www.securityfocus.com/archive/1/531223/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/65739
Exploit
Third Party Advisory
VDB Entry
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1223
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:telligent:evolution:*:*:*:*:*:*:*:*

Версия от 6.1 (включая) до 6.1.19.36103 (исключая)

cpe:2.3:a:telligent:evolution:*:*:*:*:*:*:*:*

Версия от 7.1 (включая) до 7.1.12.36162 (исключая)

cpe:2.3:a:telligent:evolution:*:*:*:*:*:*:*:*

Версия от 7.5 (включая) до 7.5.0.32466 (включая)

cpe:2.3:a:telligent:evolution:*:*:*:*:*:*:*:*

Версия от 7.6 (включая) до 7.6.7.36651 (исключая)

EPSS

Процентиль: 58%

0.00363

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-rfg2-434j-c9p9

github

больше 3 лет назад

EPSS

Процентиль: 58%

0.00363

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79