CVE

Id
78318  
CVE No.
CVE-2015-1041  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107_files/ file path in the QUERY_STRING.  
Phase
Assigned (20150111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715169 78318 CVE-2015-1041 FULLDISC:20150109 Reflecting XSS vulnerability in CMS e107 v. 1.0.4  View
715170 78318 CVE-2015-1041 URL:http://seclists.org/fulldisclosure/2015/Jan/18  View
715171 78318 CVE-2015-1041 MLIST:[oss-security] 20150111 Re: CVE Request -- CMS e107 v.1.0.4 -- Reflecting XSS vulnerability in filemanager functionality  View
715172 78318 CVE-2015-1041 URL:http://www.openwall.com/lists/oss-security/2015/01/11/6  View
715173 78318 CVE-2015-1041 MISC:http://packetstormsecurity.com/files/129872/CMS-e107-1.0.4-Cross-Site-Scripting.html  View
715174 78318 CVE-2015-1041 MISC:http://sroesemann.blogspot.de/2014/12/sroeadv-2014-05.html  View
715175 78318 CVE-2015-1041 MISC:http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-05.html  View
715176 78318 CVE-2015-1041 MISC:https://github.com/e107inc/e107v1/issues/2  View
715177 78318 CVE-2015-1041 BID:71977  View
715178 78318 CVE-2015-1041 URL:http://www.securityfocus.com/bid/71977  View
715179 78318 CVE-2015-1041 XF:e107-filemanager-xss(99898)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6813 JVNDB-2015-002133 Apple iOS および Apple OS X の FontParser における任意のコードを実行される脆弱性 Apple iOS および Apple OS X の FontParser には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-1093 78318 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002133.html  View