CVE-2013-5983 in GuppY
Summary
Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php or (2) cat parameter to mobile/thread.php.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/02/2013
Disclosure
02/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66328 | GuppY agenda.php cross site scripting | 79 | Not defined | Official fix | CVE-2013-5983 |