NVD

Id
36544  
Name
CVE-2013-0177  
Description
Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x allow remote authenticated users to inject arbitrary web script or HTML via the (1) Screenlet.title or (2) Image.alt Widget attribute, as demonstrated by the parentPortalPageId parameter to exampleext/control/ManagePortalPages.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-01-30  
Modified Date
2014-02-21  
Seq
2013-0177  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186662 36544 CVE-2013-0177 http://ofbiz.apache.org/download.html#vulnerabilities  View
186663 36544 CVE-2013-0177 http://packetstormsecurity.com/files/119673/Apache-OFBiz-Cross-Site-Scripting.html  View
186664 36544 CVE-2013-0177 20130118 [CVE-2013-0177] Cross-Site Scripting (XSS) Vulnerability in Apache OFBiz  View
186665 36544 CVE-2013-0177 apache-ofbiz-xss(81398)  View
186666 36544 CVE-2013-0177 https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432395  View
186667 36544 CVE-2013-0177 https://fisheye6.atlassian.com/changelog/ofbiz?cs=1432850  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24383 JVNDB-2013-005958 Apache Open For Business Project の widget/screen/ModelScreenWidget.java におけるクロスサイトスクリプティングの脆弱性 Apache Open For Business Project (別名 OFBiz) の widget/screen/ModelScreenWidget.java には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0177 60119 CVE-2013-0177 36544 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005958.html 2013-01-14 2014-02-03 View