Vulnerability Details CVE-2014-4033
Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 86.9%
CVSS Severity
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/127006/eFront-3.6.14.4-Cross-Site-Scripting.html
- http://www.exploit-db.com/exploits/33697
- http://www.securityfocus.com/bid/67946
- https://github.com/epignosis/efront_open_source/issues/5
- http://packetstormsecurity.com/files/127006/eFront-3.6.14.4-Cross-Site-Scripting.html
- http://www.exploit-db.com/exploits/33697
- http://www.securityfocus.com/bid/67946
- https://github.com/epignosis/efront_open_source/issues/5
Products affected by CVE-2014-4033
-
cpe:2.3:a:efrontlearning:efront:3.6.14.4