2 matches found
CVE-2014-5108
Cross-site scripting XSS vulnerability in singlepages\downloadfile.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to index.php/downloadfile...
5.7AI score0.02307EPSS
SaveExploits0References4
CVE-2014-5108: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in singlepages\downloadfile.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to index.php/downloadfile...
4.3CVSS6AI score0.02307EPSS
SaveExploits0References2
20