CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2013-4507

Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.5%

CVSS Severity

CVSS v2 Score 4.3

References

http://secunia.com/advisories/55481
http://www.collectiveaccess.org/news/collectiveaccess-version-1-3-1-released
http://secunia.com/advisories/55481
http://www.collectiveaccess.org/news/collectiveaccess-version-1-3-1-released

Products affected by CVE-2013-4507

Collectiveaccess » Pawtucket » Version: 1.1

cpe:2.3:a:collectiveaccess:pawtucket:1.1
Collectiveaccess » Pawtucket » Version: 1.2

cpe:2.3:a:collectiveaccess:pawtucket:1.2
Collectiveaccess » Pawtucket » Version: 1.3

cpe:2.3:a:collectiveaccess:pawtucket:1.3
Collectiveaccess » Providence » Version: 1.1

cpe:2.3:a:collectiveaccess:providence:1.1
Collectiveaccess » Providence » Version: 1.2

cpe:2.3:a:collectiveaccess:providence:1.2
Collectiveaccess » Providence » Version: 1.3

cpe:2.3:a:collectiveaccess:providence:1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4507

Products

Pricing

Contact Us