NVD

Id
23428  
Name
CVE-2015-1040  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile form to index.php/home/profile; the (2) data[title] or (3) data[description] field in the addQuickItem form to index.php; the (4) "note text" field in the saveNote form to index.php/areas; or the (5) titleBEObject or (6) tagsArea field in the updateForm form to index.php/documents/view.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-15  
Modified Date
2015-01-15  
Seq
2015-1040  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124044 23428 CVE-2015-1040 http://packetstormsecurity.com/files/129865/CMS-BEdita-3.4.0-Cross-Site-Scripting.html  View
124045 23428 CVE-2015-1040 20150108 Multiple persistent XSS vulnerabilites in CMS BEdita v. 3.4.0  View
124046 23428 CVE-2015-1040 [oss-security] 20150111 Re: CVE Request -- CMS BEdita v. 3.4.0 -- Multiple stored XSS vulnerabilities  View
124047 23428 CVE-2015-1040 http://sroesemann.blogspot.de/2014/12/sroeadv-2014-10.html  View
124048 23428 CVE-2015-1040 71949  View
124049 23428 CVE-2015-1040 https://github.com/bedita/bedita/issues/566  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5725 JVNDB-2015-001045 BEdita の管理バックエンドにおけるクロスサイトスクリプティングの脆弱性 BEdita の管理バックエンドには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-1040 78265 CVE-2015-1040 23428 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001045.html 2015-01-08 2015-01-19 View