CVE-2014-2965 in SpamTitan

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 21/04/2014
• Divulgazione: 03/07/2014
• Moderazione: accettato
• Voce: VDB-70256
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.02499
• KEV: no
• Attività: molto basso
• Settore: Energy, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-2965
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-2965
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-2965/