CVE

Id
78331  
CVE No.
CVE-2015-1054  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.  
Phase
Assigned (20150116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
715244 78331 CVE-2015-1054 EXPLOIT-DB:35691  View
715245 78331 CVE-2015-1054 URL:http://www.exploit-db.com/exploits/35691  View
715246 78331 CVE-2015-1054 MISC:http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html  View
715247 78331 CVE-2015-1054 CONFIRM:http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270  View
715248 78331 CVE-2015-1054 CONFIRM:http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support  View
715249 78331 CVE-2015-1054 OSVDB:116732  View
715250 78331 CVE-2015-1054 URL:http://osvdb.org/show/osvdb/116732  View
715251 78331 CVE-2015-1054 XF:crea8social-game-xss(99615)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6827 JVNDB-2015-002147 Apple iOS のキーボードサブシステムの QuickType 機能におけるパスコードを取得される脆弱性 Apple iOS のキーボードサブシステムの QuickType 機能には、パスコードを取得される脆弱性が存在します。 CVE-2015-1106 78331 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002147.html  View