CVE-2014-4734

Published: Jul 21, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in e107_admin/db.php in e107 2.0 alpha2 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.htbridge.com/advisory/HTB23220

x_refsource_MISC

https://github.com/e107inc/e107/commit/f80e417bb3e7ab5c1a89ea9ddd2cd060f54464e1

x_refsource_CONFIRM

68674

vdb-entry

x_refsource_BID

http://packetstormsecurity.com/files/127499/e107-2.0-alpha2-Cross-Site-Scripting.html

x_refsource_MISC

20140716 Reflected Cross-Site Scripting (XSS) in e107

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-4734

Description

Affected Products

References