CVE-2013-0807

🗓️ 28 Mar 2014 15:08:55Reported by mitreType

cve🔗 web.nvd.nist.gov👁 32 Views🌐 WEB

CVE-2013-0807 XSS vulnerability in gpEasy CMS 3.5.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2013-0807	28 Mar 201415:00	–	cvelist
Packet Storm	gpEasy 3.5.2 Cross Site Scripting	24 Jan 201300:00	–	packetstorm
htbridge	Cross-Site Scripting (XSS) vulnerability in gpEasy	2 Jan 201300:00	–	htbridge
securityvulns	Cross-Site Scripting (XSS) vulnerability in gpEasy	28 Jan 201300:00	–	securityvulns
securityvulns	Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)	28 Jan 201300:00	–	securityvulns
Prion	Cross site scripting	28 Mar 201415:55	–	prion
NVD	CVE-2013-0807	28 Mar 201415:55	–	nvd

Nvd

Node

gpeasy gpeasy_cmsRange≤3.5.2

gpeasy gpeasy_cmsMatch1.5

gpeasy gpeasy_cmsMatch1.5rc2

gpeasy gpeasy_cmsMatch1.5rc3

gpeasy gpeasy_cmsMatch1.5rc4

gpeasy gpeasy_cmsMatch1.6

gpeasy gpeasy_cmsMatch1.6rc1

gpeasy gpeasy_cmsMatch1.6rc2

gpeasy gpeasy_cmsMatch1.6rc3

gpeasy gpeasy_cmsMatch1.6rc4

gpeasy gpeasy_cmsMatch1.6rc5

gpeasy gpeasy_cmsMatch1.6.1

gpeasy gpeasy_cmsMatch1.6.2

gpeasy gpeasy_cmsMatch1.6.3

gpeasy gpeasy_cmsMatch2.0.1

gpeasy gpeasy_cmsMatch2.1

gpeasy gpeasy_cmsMatch2.2

gpeasy gpeasy_cmsMatch2.3

gpeasy gpeasy_cmsMatch2.3.1

gpeasy gpeasy_cmsMatch2.3.2

gpeasy gpeasy_cmsMatch2.3.3

gpeasy gpeasy_cmsMatch2.4

gpeasy gpeasy_cmsMatch3.0

gpeasy gpeasy_cmsMatch3.0.1

gpeasy gpeasy_cmsMatch3.0.2

gpeasy gpeasy_cmsMatch3.0.3

gpeasy gpeasy_cmsMatch3.0.4

gpeasy gpeasy_cmsMatch3.0.5

gpeasy gpeasy_cmsMatch3.5

gpeasy gpeasy_cmsMatch3.5.1

Source	Link
osvdb	www.osvdb.org/89536
packetstormsecurity	www.packetstormsecurity.com/files/119805/gpEasy-3.5.2-Cross-Site-Scripting.html
github	www.github.com/oyejorge/gpEasy-CMS/commit/40f1b4a5749a621cd27c5ca39900dbcf8701969d
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/81472
archives	www.archives.neohapsis.com/archives/bugtraq/2013-01/0104.html
htbridge	www.htbridge.com/advisory/HTB23137

Parameter	Position	Path	Description	CWE
section	query param	/?cmd=new_section	Cross-Site Scripting (XSS) vulnerability due to insufficient sanitization of user-supplied data in section parameter.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2014 15:55Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

EPSS0.00563

CWE-79