| |
Vulnerability CVE-2014-1826
Published: 2014-03-26
| Description: |
Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to inject arbitrary web script or HTML via a crafted map name. |
See advisories in our WLB2 database: | Topic | Author | Date |
High |
| James and Justin | 26.03.2014 |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS2 => (AV:N/AC:H/Au:N/C:N/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
2.6/10 |
2.9/10 |
4.9/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
High |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
Partial |
None |
References: |
http://www.madirish.net/559
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
