Lucene search
MitreCVELIST:CVE-2014-2016HistoryMar 25, 2014 - 2:00 p.m.
CVE-2014-2016
2014-03-2514:00:00
mitre
www.cve.org
0.001 Low
EPSS
Percentile
49.2%
Multiple cross-site scripting (XSS) vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web script or HTML via the searchtag parameter to the getTag function in (1) application/controllers/details.php or (2) application/controllers/tag.php.
Related
cve
cve
CVE-2014-2016
2014-03-25 18:21:48
seebug
seebug
OXID eShop 'sample-name.html'跨站脚本漏洞
2014-03-25 00:00:00
OXID eShop < 4.7.11/5.0.11 + < 4.8.4/5.1.4 - Multiple Vulnerabilities
2014-07-01 00:00:00
prion
prion
Cross site scripting
2014-03-25 18:21:00
nvd
nvd
CVE-2014-2016
2014-03-25 18:21:48
packetstorm
packetstorm
OXID eShop XSS / CRLF Injection
2014-03-20 00:00:00
exploitpack
exploitpack
OXID eShop 4.7.115.0.11 4.8.45.1.4 - Multiple Vulnerabilities
2014-03-20 00:00:00
zdt
zdt
OXID eShop < 4.7.11/5.0.11 + < 4.8.4/5.1.4 - Multiple Vulnerabilities
2014-03-21 00:00:00
exploitdb
exploitdb
OXID eShop < 4.7.11/5.0.11 / < 4.8.4/5.1.4 - Multiple Vulnerabilities
2014-03-20 00:00:00