CVE-2013-0807 in gpEasy信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-01-05

披露

2014-03-28

管理

已接受

条目

VDB-66810

CPE

准备好

CWE

CWE-79 (已确认)

利用

下载

CVSS

4.3 (NVD)

EPSS

0.09874

KEV

否

活动

低

部门

Hostingprovider, Lawfirm, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-0807
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-0807
CVE Details	https://www.cvedetails.com/cve/CVE-2013-0807/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!