CVE-2014-8577 in Croogo
Zusammenfassung (Englisch)
Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Contact][title] parameter to admin/contacts/contacts/add page; (2) data[Block][title] or (3) data[Block][alias] parameter to admin/blocks/blocks/edit page; (4) data[Region][title] parameter to admin/blocks/regions/add page; (5) data[Menu][title] or (6) data[Menu][alias] parameter to admin/menus/menus/add page; or (7) data[Link][title] parameter to admin/menus/links/add/menu page.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
31.10.2014
Veröffentlichung
31.10.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 72771 | Croogo Cross Site Scripting | 79 | Proof-of-Concept | Offizieller Fix | CVE-2014-8577 |