Back to search
CVE-2013-0805
Published: Mar 20, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT Operations Portal) 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to pages/UI.php or (2) expression parameter to pages/run_query.php. NOTE: some of these details are obtained from third party information.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://www.csnc.ch/misc/files/advisories/CVE-2013-0805.txt
x_refsource_MISC
51702
third-party-advisory
x_refsource_SECUNIA
itop-ui-runquery-xss(81498)
vdb-entry
x_refsource_XF
20130123 CVE-2013-0805 / CSNC-2013-001
mailing-list
x_refsource_BUGTRAQ
20130123 CVE-2013-0805
mailing-list
x_refsource_FULLDISC
89574
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now