CVE

Id
66829  
CVE No.
CVE-2013-6882  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in a login or (2) remote authenticated users to inject arbitrary web script or HTML via unspecified form fields.  
Phase
Assigned (20131127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
647058 66829 CVE-2013-6882 EXPLOIT-DB:30396  View
647059 66829 CVE-2013-6882 URL:http://www.exploit-db.com/exploits/30396  View
647060 66829 CVE-2013-6882 FULLDISC:20131212 Ditto Forensic FieldStation, multiple vulnerabilities  View
647061 66829 CVE-2013-6882 URL:http://seclists.org/fulldisclosure/2013/Dec/80  View
647062 66829 CVE-2013-6882 MISC:http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html  View
647063 66829 CVE-2013-6882 OSVDB:100996  View
647064 66829 CVE-2013-6882 URL:http://osvdb.org/100996  View
647065 66829 CVE-2013-6882 OSVDB:101000  View
647066 66829 CVE-2013-6882 URL:http://osvdb.org/101000  View
647067 66829 CVE-2013-6882 SECUNIA:55989  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24786 JVNDB-2013-006361 OpenJPEG におけるサービス運用妨害 (DoS) の脆弱性 OpenJPEG には、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2013-6887 66829 6.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006361.html  View