CVE-2013-0124

2022-10-0316:15:02

certcc

www.cve.org

askia askiaweb

xss vulnerabilities

administration interface

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll.

References

www.kb.cert.org/vuls/id/406596