NVD

Id
37659  
Name
CVE-2013-1466  
Description
Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-02-05  
Modified Date
2014-02-24  
Seq
2013-1466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191545 37659 CVE-2013-1466 20130220 Multiple Cross-Site Scripting (XSS) in glFusion  View
191546 37659 CVE-2013-1466 http://packetstormsecurity.com/files/120423/glFusion-1.2.2-Cross-Site-Scripting.html  View
191547 37659 CVE-2013-1466 24536  View
191548 37659 CVE-2013-1466 http://www.glfusion.org/article.php/glf122_update_20130130_01  View
191549 37659 CVE-2013-1466 glfusion-multiple-xss(82211)  View
191550 37659 CVE-2013-1466 https://www.htbridge.com/advisory/HTB23142  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24415 JVNDB-2013-005990 glFusion におけるクロスサイトスクリプティングの脆弱性 glFusion には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-1466 61408 CVE-2013-1466 37659 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005990.html 2013-01-30 2014-02-06 View