CVE-2014-5098 in Search module

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2014-07-24

Divulgación

2014-10-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
72479	Jamroom Search module secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2014-5098

Fuentes

• MITRE
• NVD
• CVE Details