NVD

Id
37952  
Name
CVE-2013-1804  
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the (2) user_list or (3) user_types parameter to messages.php; (4) message parameter to infusions/shoutbox_panel/shoutbox_admin.php; (5) message parameter to administration/news.php; (6) panel_list parameter to administration/panel_editor.php; (7) HTTP User Agent string to administration/phpinfo.php; (8) "__BBCODE__" parameter to administration/bbcodes.php; errorMessage parameter to (9) article_cats.php, (10) download_cats.php, (11) news_cats.php, or (12) weblink_cats.php in administration/, when error is 3; or (13) body or (14) body2 parameter to administration/articles.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-04-29  
Modified Date
2014-08-04  
Seq
2013-1804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193787 37952 CVE-2013-1804 http://packetstormsecurity.com/files/120598/PHP-Fusion-7.02.05-XSS-LFI-SQL-Injection.html  View
193788 37952 CVE-2013-1804 20130228 [waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05  View
193789 37952 CVE-2013-1804 [oss-security] 20130303 CVE request: PHP-Fusion waraxe-2013-SA#097  View
193790 37952 CVE-2013-1804 [oss-security] 20130302 Re: CVE request: PHP-Fusion waraxe-2013-SA#097  View
193791 37952 CVE-2013-1804 http://www.php-fusion.co.uk/news.php?readmore=569  View
193792 37952 CVE-2013-1804 http://www.waraxe.us/advisory-97.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24811 JVNDB-2013-006386 PHP-Fusion におけるクロスサイトスクリプティングの脆弱性 PHP-Fusion には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-1804 61746 CVE-2013-1804 37952 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006386.html 2013-01-27 2014-05-02 View