CVE-2014-1237

🗓️ 11 Feb 2014 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

CVE-2014-1237 Cross-site scripting vulnerability in synetics i-doit pr

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2014-1237	11 Feb 201417:00	–	cvelist
EUVD	EUVD-2014-1315	7 Oct 202500:30	–	euvd
NVD	CVE-2014-1237	11 Feb 201417:55	–	nvd
Packet Storm	i-doit Pro 1.2.4 Cross Site Scripting	5 Feb 201400:00	–	packetstorm
Prion	Cross site scripting	11 Feb 201417:55	–	prion

NVD

Node

i-doit i-doitRange≤1.2.3pro

i-doit i-doitMatch1.1.1pro

i-doit i-doitMatch1.1.2pro

i-doit i-doitMatch1.2.1pro

i-doit i-doitMatch1.2.2pro

Source	Link
seclists	www.seclists.org/fulldisclosure/2014/Feb/26
secunia	www.secunia.com/advisories/56834
i-doit	www.i-doit.com/en/company/news/single-news/
securityfocus	www.securityfocus.com/bid/65353
secunia	www.secunia.com/advisories/56802
packetstormsecurity	www.packetstormsecurity.com/files/125062
csnc	www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/90969
osvdb	www.osvdb.org/102910

Parameter	Position	Path	Description	CWE
call	query param	/?ajax=1&objID=1753&call=');}</script><script>alert('XSS')</script>	Reflected XSS via unsafely handled call parameter in i-doit web application (before 1.2.4).	CWE-79

29 Apr 2026 01:13Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

EPSS0.00698