CVE

Id
78330  
CVE No.
CVE-2015-1053  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path parameter to admin/file_manager/file_manager/editfile.  
Phase
Assigned (20150116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715234 78330 CVE-2015-1053 FULLDISC:20150112 Reflecting XSS vulnerability in CMS Croogo v.2.2.0  View
715235 78330 CVE-2015-1053 URL:http://seclists.org/fulldisclosure/2015/Jan/24  View
715236 78330 CVE-2015-1053 MISC:http://packetstormsecurity.com/files/129916/CMS-Croogo-2.2.0-Cross-Site-Scripting.html  View
715237 78330 CVE-2015-1053 MISC:http://sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2015-02.html  View
715238 78330 CVE-2015-1053 MISC:http://sroesemann.blogspot.de/2015/01/sroeadv-2015-02.html  View
715239 78330 CVE-2015-1053 CONFIRM:https://blog.croogo.org/blog/croogo-221-released  View
715240 78330 CVE-2015-1053 CONFIRM:https://github.com/croogo/croogo/issues/599  View
715241 78330 CVE-2015-1053 BID:71999  View
715242 78330 CVE-2015-1053 URL:http://www.securityfocus.com/bid/71999  View
715243 78330 CVE-2015-1053 XF:croogo-filemanagereditfile-xss(99890)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6841 JVNDB-2015-002161 複数の Apple 製品のカーネルの TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 Apple iOS、Apple OS X、および Apple TV カーネルの TCP の実装は、Urgent (別名 out-of-band データ) メカニズムを適切に実装していないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-1105 78330 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002161.html  View