CVE-2015-4665 in Xsuite

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.3.0 and 2.4.3.0 allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2015-06-19

Divulgación

2015-08-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
77084	Xceedium Xsuite ajax_cmd.php secuencias de comandos en sitios cruzados	79	Prueba de concepto	No está definido	CVE-2015-4665

Fuentes

• MITRE
• NVD
• CVE Details