Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-1224
HistoryOct 06, 2014 - 11:00 p.m.

CVE-2014-1224

2014-10-0623:00:00
mitre
www.cve.org
1

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

JSON

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without “fixes from 2014-01-15” allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.

Related

securityvulns 2
cve 1
nvd 1
packetstorm 1
prion 1
securityvulns
securityvulns
[RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration
2014-05-05 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-05 00:00:00
cve
cve
CVE-2014-1224
2014-10-06 23:55:07
nvd
nvd
CVE-2014-1224
2014-10-06 23:55:07
packetstorm
packetstorm
rexx Recruitment Cross Site Scripting
2014-03-27 00:00:00
prion
prion
Cross site scripting
2014-10-06 23:55:00

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

JSON
Related for CVELIST:CVE-2014-1224
securityvulns2cve1nvd1packetstorm1prion1