Vulnerability CVE-2014-9916


Published: 2017-02-23   Modified: 2017-02-24

Description:
Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) tribe_name or (2) tags parameter in a tribes page request to user/ or the (3) user_id or (4) fullname parameter to signup.php.

Vendor: Bilboplanet
Product: Bilboplanet 
Version: 2.0;
Vendor: Bilboplanet project
Product: Bilboplanet 
Version: 2.0;

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None

 References:
http://www.exploit-db.com/exploits/34089

Copyright 2019, cxsecurity.com

 

Back to Top