NVD

Id
39396  
Name
CVE-2013-3639  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmodule parameter to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-02-05  
Modified Date
2014-02-24  
Seq
2013-3639  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200905 39396 CVE-2013-3639 20130626 Multiple XSS Vulnerabilities in Xaraya  View
200906 39396 CVE-2013-3639 http://packetstormsecurity.com/files/122174/Xaraya-2.4.0-b1-Cross-Site-Scripting.html  View
200907 39396 CVE-2013-3639 xaraya-cve20133639-xss(85300)  View
200908 39396 CVE-2013-3639 https://www.htbridge.com/advisory/HTB23156  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24420 JVNDB-2013-005995 Xaraya におけるクロスサイトスクリプティングの脆弱性 Xaraya には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-3639 63581 CVE-2013-3639 39396 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005995.html 2013-06-26 2014-02-07 View