NVD

Id
38069  
Name
CVE-2013-1942  
Description
Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other products, allow remote attackers to inject arbitrary web script or HTML via the (1) jQuery or (2) id parameters, as demonstrated using document.write in the jQuery parameter, a different vulnerability than CVE-2013-2022 and CVE-2013-2023.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-15  
Modified Date
2016-12-07  
Seq
2013-1942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194577 38069 CVE-2013-1942 [oss-security] 20130411 CVE-2013-1942 jPlayer 2.2.19 XSS  View
194578 38069 CVE-2013-1942 [oss-security] 20130429 Re: CVE-2013-1942 jPlayer 2.2.19 XSS  View
194579 38069 CVE-2013-1942 [oss-security] 20130505 Re: CVE-2013-1942 jPlayer 2.2.19 XSS  View
194580 38069 CVE-2013-1942 http://owncloud.org/about/security/advisories/oC-SA-2013-014/  View
194581 38069 CVE-2013-1942 20130421 Vulnerabilities in jPlayer  View
194582 38069 CVE-2013-1942 http://www.jplayer.org/2.3.0/release-notes/  View
194583 38069 CVE-2013-1942 59030  View
194584 38069 CVE-2013-1942 https://github.com/happyworm/jPlayer/commit/e8ca190f7f972a6a421cb95f09e138720e40ed6d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22172 JVNDB-2013-003747 ownCloud Server などの製品で使用される jPlayer の Flash SWF コンポーネントにおけるクロスサイトスクリプティングの脆弱性 ownCloud Server およびその他の製品で使用される jPlayer の Flash SWF コンポーネントの actionscript/Jplayer.as には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-1942 61884 CVE-2013-1942 38069 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003747.html 2013-03-21 2013-08-19 View