CVE-2014-2002

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2014-2002
Cross-site scripting (XSS) vulnerability in C-BOARD Moyuku 1.01b6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://jvn.jp/en/jp/JVN58029817/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000051
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b1:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:*:b6:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b3:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b4:*:*:*:*:*:*
cpe:2.3:a:c-board_moyuku_project:c-board_moyuku:1.01:b2:*:*:*:*:*:*
Information

Published : 2014-06-14 04:18

Updated : 2014-06-16 08:56

NVD link : CVE-2014-2002

Mitre link : CVE-2014-2002

JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa
Products Affected

c-board_moyuku_project

  • c-board_moyuku