Логотип exploitDog
bind:CVE-2013-4940
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2013-4940

Количество 4

Количество 4

ubuntu логотип

CVE-2013-4940

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2013-4940

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2013-4940

почти 12 лет назад

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility c ...

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-x5hj-47vv-53p8

около 3 лет назад

YUI Cross-site Scripting (XSS) vulnerability

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-4940

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.

CVSS2: 4.3
0%
Низкий
почти 12 лет назад
nvd логотип
CVE-2013-4940

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.

CVSS2: 4.3
0%
Низкий
почти 12 лет назад
debian логотип
CVE-2013-4940

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility c ...

CVSS2: 4.3
0%
Низкий
почти 12 лет назад
github логотип
GHSA-x5hj-47vv-53p8

YUI Cross-site Scripting (XSS) vulnerability

0%
Низкий
около 3 лет назад

Уязвимостей на страницу