NVD

Id
40530  
Name
CVE-2013-5099  
Description
Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-09  
Modified Date
2013-08-14  
Seq
2013-5099  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205533 40530 CVE-2013-5099 26958  View
205534 40530 CVE-2013-5099 61376  View
205535 40530 CVE-2013-5099 anchorcms-article-comments-xss(85888)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22129 JVNDB-2013-003704 Anchor CMS の article.php におけるクロスサイトスクリプティングの脆弱性 Anchor CMS の article.php には、コメントが有効である場合、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5099 65041 CVE-2013-5099 40530 2.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003704.html 2013-07-18 2013-08-19 View