NVD

Id
36334  
Name
CVE-2014-9743  
Description
Cross-site scripting (XSS) vulnerability in the httpd_HtmlError function in network/httpd.c in the web interface in VideoLAN VLC Media Player before 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the path info.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-17  
Modified Date
2015-08-19  
Seq
2014-9743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185863 36334 CVE-2014-9743 http://git.videolan.org/?p=vlc.git;a=commit;h=fe5063ec5ad1873039ea719eb1f137c8f3bda84b  View
185864 36334 CVE-2014-9743 20140318 [Quantum Leap Advisory] #QLA140216 - VLC Reflected XSS vulnerability  View
185865 36334 CVE-2014-9743 http://www.quantumleap.it/vlc-reflected-xss-vulnerability/  View
185866 36334 CVE-2014-9743 66307  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19229 JVNDB-2014-008106 VideoLAN VLC Media Player の Web インターフェースの network/httpd.c の httpd_HtmlError 関数におけるクロスサイトスクリプティングの脆弱性 VideoLAN VLC Media Player の Web インターフェースの network/httpd.c の httpd_HtmlError 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9743 77036 CVE-2014-9743 36334 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008106.html 2014-03-18 2015-08-24 View