Lucene search
K

CVE-2013-6241

🗓️ 27 Dec 2014 18:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Open-Xchange (OX) AppSuite 7.2.x/7.4.x Birthday widget SQL injectio

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2013-6241
27 Dec 201418:00
cvelist
EUVD
EUVD-2013-6069
7 Oct 202500:30
euvd
NVD
CVE-2013-6241
27 Dec 201418:59
nvd
OpenVAS
Open-Xchange (OX) App Suite Multiple Vulnerabilities -05 (Nov 2015)
2 Nov 201500:00
openvas
Prion
Open redirect
27 Dec 201418:59
prion
securityvulns
Open-Xchange Security Advisory 2013-11-06
18 Nov 201300:00
securityvulns
ParameterPositionPathDescriptionCWE
actionrequest bodyapi/contactsAuthenticated remote attackers can obtain sensitive birthday, displayname, firstname and surname information via the birthdays action on api/contacts due to improper SQL statement construction.CWE-200
birthdaysrequest bodyapi/contactsAuthenticated remote attackers can obtain sensitive birthday, displayname, firstname and surname information via the birthdays action on api/contacts due to improper SQL statement construction.CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 May 2026 22:30Current
6.4Medium risk
Vulners AI Score6.4
CVSS 24
EPSS0.00176
40