Lucene search
HistoryJan 29, 2014 - 6:55 p.m.
CVE-2013-4888
cve-2013-4888
cross-site scripting
xss
vulnerability
digital signage xibo
index.php
web script
html
layout parameter
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.2%
Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page.
Affected configurations
Node
springsignagexiboMatch1.4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| springsignage:xibo | springsignage xibo | eq | 1.4.2 |
Related
nvd
nvd
CVE-2013-4888
2014-01-29 18:55:26
CVE-2013-4889
2014-01-29 18:55:26
prion
prion
Cross site scripting
2014-01-29 18:55:00
Cross site request forgery (csrf)
2014-01-29 18:55:00
cvelist
cvelist
CVE-2013-4888
2014-01-29 18:00:00
CVE-2013-4889
2014-01-29 18:00:00
exploitpack
exploitpack
Xibo - Cross-Site Request Forgery
2013-08-21 00:00:00
cve
cve
CVE-2013-4889
2014-01-29 18:55:26
exploitdb
exploitdb
Xibo - Cross-Site Request Forgery
2013-08-21 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
53.2%
Related for CVE-2013-4888