NVD

Id
85159  
Name
CVE-2016-4849  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COM_getCurrentURL function in (1) public_html/layout/default/header.thtml, (2) public_html/layout/bento/header.thtml, (3) public_html/layout/fotos/header.thtml, or (4) public_html/layout/default/article/article.thtml.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-04-27  
Published
2017-04-20  
Modified Date
2017-04-25  
Seq
2016-4849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415063 85159 CVE-2017-7274 https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf  View
415064 85159 CVE-2017-7274 https://github.com/radare/radare2/issues/7152  View
415065 85159 CVE-2017-7274 https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf  View
415066 85159 CVE-2017-7274 https://github.com/radare/radare2/issues/7152  View
415067 85159 CVE-2017-7274 https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf  View
415068 85159 CVE-2017-7274 https://github.com/radare/radare2/issues/7152  View
418077 85159 CVE-2017-3496 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418078 85159 CVE-2017-3496 97766  View
418079 85159 CVE-2017-3496 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418080 85159 CVE-2017-3496 97766  View

Related JVN