CVE-2014-2260 in ajenti
Summary
Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
02/28/2014
Disclosure
04/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69553 | ajenti cross site scripting | 79 | Not defined | Official fix | CVE-2014-2260 |