Lucene search
HistoryFeb 11, 2014 - 5:55 p.m.
CVE-2013-1413
cve
2013
1413
xss
vulnerabilities
synetics
i-doit
web script
html
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
59.9%
Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when the ‘sanitize user input’ flag is not enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| i-doit:i-doit | i-doit | eq | 0.9.9 |
| i-doit:i-doit | i-doit | le | 1.0 |
| i-doit:i-doit | i-doit | eq | 1.0.2 |
Related
prion
prion
Cross site scripting
2014-02-11 17:55:00
securityvulns
securityvulns
CVE-2013-1413
2013-03-11 00:00:00
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
59.9%
Related for CVE-2013-1413