CVE-2013-0124

2013-03-2121:00:00

certcc

www.cve.org

askia askiaweb

xss vulnerabilities

administration interface

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll.

References

www.kb.cert.org/vuls/id/406596