CVE-2014-1237

N/A

Descricao

Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/11/2014

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

i-doit:i-doit

Fraquezas (CWE)

CWE-79

Referencias

http://osvdb.org/102910(cve@mitre.org)

http://packetstormsecurity.com/files/125062(cve@mitre.org)

http://seclists.org/fulldisclosure/2014/Feb/26(cve@mitre.org)

http://secunia.com/advisories/56802(cve@mitre.org)

http://secunia.com/advisories/56834(cve@mitre.org)

http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt(cve@mitre.org)

http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=136(cve@mitre.org)

http://www.securityfocus.com/bid/65353(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/90969(cve@mitre.org)

http://osvdb.org/102910(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/125062(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2014/Feb/26(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/56802(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/56834(af854a3a-2127-422b-91ae-364da2661108)

http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt(af854a3a-2127-422b-91ae-364da2661108)

http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=136(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/65353(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/90969(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.