NVD

Id
31371  
Name
CVE-2014-3111  
Description
Multiple cross-site scripting (XSS) vulnerabilities in FOG 0.27 through 0.32 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Printer Model field to the Printer Management page, (2) Image Name field to the Image Management page, (3) Storage Group Name field to the Storage Management page, (4) Username field to the User Cleanup FOG Configuration page, or (5) Directory Path field to the Directory Cleaner FOG Configuration page.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-21  
Modified Date
2015-07-31  
Seq
2014-3111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164235 31371 CVE-2014-3111 http://fogproject.org/forum/threads/stored-xss-vulnerability-in-fog-project-version-0-27-through-0-32.10394  View
164236 31371 CVE-2014-3111 20140514 FD - Multiple stored XSS in FOG imaging deployment system CVE-2014-3111  View
164237 31371 CVE-2014-3111 [oss-security] 20140430 Re: CVE Request - XSS in FOG open imaging system  View
164238 31371 CVE-2014-3111 20140513 Multiple Stored XSS in FOG Image deployment system - FD  View
164239 31371 CVE-2014-3111 67141  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16168 JVNDB-2014-005043 FOG におけるクロスサイトスクリプティングの脆弱性 FOG には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3111 70398 CVE-2014-3111 31371 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005043.html 2014-04-29 2014-10-28 View