CVE-2014-5317

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2014-5317
Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://jvn.jp/en/jp/JVN36205251/index.html Vendor Advisory
http://php365.com/information.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000106
http://www.securityfocus.com/bid/69870
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:php365:365_links:*:*:*:*:*:*:*:*
cpe:2.3:a:php365:365_links\+:*:*:*:*:*:*:*:*
cpe:2.3:a:php365:365_links2:*:*:*:*:*:*:*:*
cpe:2.3:a:php365:365_links_2\+:*:*:*:*:*:*:*:*
Information

Published : 2014-09-18 03:55

Updated : 2015-09-02 10:20

NVD link : CVE-2014-5317

Mitre link : CVE-2014-5317

JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa
Products Affected

php365

  • 365_links2
  • 365_links
  • 365_links_2\+
  • 365_links\+