Lucene search
K

CVE-2014-10079

šŸ—“ļøĀ 23 Feb 2019Ā 14:00:00Reported byĀ mitreTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 54Ā Views🌐 WEB

Vembu StoreGrid 4.4.x web interface discloses private IP address via "ipaddress" hidden form value in HTML source code

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities
15 Mar 201900:00
–zdt
Circl
CVE-2014-10079
23 Feb 201916:38
–circl
Cvelist
CVE-2014-10079
23 Feb 201914:00
–cvelist
Exploit DB
Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities
15 Mar 201900:00
–exploitdb
exploitpack
Vembu Storegrid Web Interface 4.4.0 - Multiple Vulnerabilities
15 Mar 201900:00
–exploitpack
NVD
CVE-2014-10079
23 Feb 201914:29
–nvd
Packet Storm
Vembu Storegrid Web Interface 4.4.0 Cross Site Scripting / Information Disclosure
15 Mar 201900:00
–packetstorm
Prion
Code injection
23 Feb 201914:29
–prion
NVD
Node
ParameterPositionPathDescriptionCWE
cnquery paraminterface/registercustomer/onlineregsuccess.phpReflected XSS vulnerability in customer registration success endpoint exposed via user-supplied query parameters.CWE-200
resultquery paraminterface/registercustomer/onlineregsuccess.phpReflected XSS vulnerability in customer registration success endpoint exposed via user-supplied query parameters.CWE-200
cnquery paraminterface/registerreseller/onlineregfailure.phpReflected XSS vulnerability in reseller registration failure endpoint exposed via user-supplied query parameters.CWE-200
resultquery paraminterface/registerreseller/onlineregfailure.phpReflected XSS vulnerability in reseller registration failure endpoint exposed via user-supplied query parameters.CWE-200
cnquery paraminterface/registerclient/onlineregfailure.phpReflected XSS vulnerability in client registration failure endpoint exposed via user-supplied query parameters.CWE-200
resultquery paraminterface/registerclient/onlineregfailure.phpReflected XSS vulnerability in client registration failure endpoint exposed via user-supplied query parameters.CWE-200

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 02:03Current
5.4Medium risk
Vulners AI Score5.4
CVSS 25
CVSS 35.3
EPSS0.09719
54