CVE-2014-2035 in Web Control Panel
Summary
Cross-site scripting (XSS) vulnerability in xhr.php in InterWorx Web Control Panel (aka InterWorx Hosting Control Panel and InterWorx-CP) before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/19/2014
Disclosure
02/27/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66470 | InterWorx Web Control Panel xhr.php cross site scripting | 79 | Not defined | Official fix | CVE-2014-2035 |