Vulnerability Details CVE-2014-5317
Cross-site scripting (XSS) vulnerability in php365.com 365 Links 3.11 and earlier, 365 Links2 3.11 and earlier, 365 Links+ 2.10 and earlier, and 365 Links2+ 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://jvn.jp/en/jp/JVN36205251/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000106
- http://php365.com/information.html
- http://www.securityfocus.com/bid/69870
- http://jvn.jp/en/jp/JVN36205251/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000106
- http://php365.com/information.html
- http://www.securityfocus.com/bid/69870
Products affected by CVE-2014-5317
-
cpe:2.3:a:php365:365_links+:*
-
cpe:2.3:a:php365:365_links2:*
-
cpe:2.3:a:php365:365_links:*
-
cpe:2.3:a:php365:365_links_2+:*