Lucene search
CVE-2013-6163
Multiple XSS vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2013-6163 | 14 Nov 201320:55 | – | nvd |
 | [ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" | 9 Dec 201300:00 | – | securityvulns |
| Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 9 Dec 201300:00 | – | securityvulns |
 | Cross site scripting | 14 Nov 201320:55 | – | prion |
 | CVE-2013-6163 | 14 Nov 201320:00 | – | cvelist |
 | Project'Or RIA 3.4.0 Cross Site Scripting | 5 Nov 201300:00 | – | packetstorm |
Node
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| type | query param | /view/parameter.php | Cross-site scripting vulnerability allowing injection of arbitrary HTML/script code through the type parameter. | CWE-79 |
| p1value | query param | /view/main.php | Cross-site scripting vulnerability allowing injection of arbitrary HTML/script code through the p1value parameter. | CWE-79 |
| objectClass | request body | /view/objectDetail.php | Cross-site scripting vulnerability allowing injection of arbitrary HTML/script code through the objectClass parameter. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Nov 2013 20:55Current
5.8Medium risk
Vulners AI Score5.8
CVSS24.3
EPSS0.00665