Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-1636
HistoryMar 12, 2014 - 2:55 p.m.

CVE-2013-1636

2014-03-1214:55:00
Debian Security Bug Tracker
security-tracker.debian.org
4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers to inject arbitrary web script or HTML via the get-data parameter.

OSVersionArchitecturePackageVersionFilename
Debian9allbiomaj-watcher< 1.2.2-4+deb9u1biomaj-watcher_1.2.2-4+deb9u1_all.deb

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

Related for DEBIANCVE:CVE-2013-1636