CVE

Id
75789  
CVE No.
CVE-2014-8488  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.  
Phase
Assigned (20141026)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
700800 75789 CVE-2014-8488 FULLDISC:20141025 Yourls XSS Stored  View
700801 75789 CVE-2014-8488 URL:http://seclists.org/fulldisclosure/2014/Oct/111  View
700802 75789 CVE-2014-8488 FEDORA:FEDORA-2015-5965  View
700803 75789 CVE-2014-8488 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156596.html  View
700804 75789 CVE-2014-8488 FEDORA:FEDORA-2015-5972  View
700805 75789 CVE-2014-8488 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156526.html  View
700806 75789 CVE-2014-8488 FEDORA:FEDORA-2015-6002  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16988 JVNDB-2014-005863 Digicom DG-5514T ADSL ルータのファームウェアにおける管理者権限を取得される脆弱性 Digicom DG-5514T ADSL ルータのファームウェアは、予測可能なセッション ID を生成するため、管理者権限を取得される脆弱性が存在します。 CVE-2014-8496 75789 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005863.html  View