Lucene search
Veracode Vulnerability DatabaseVERACODE:4666HistoryJul 25, 2017 - 7:51 p.m.
Cross-site Scripting (XSS)
2017-07-2519:51:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.003 Low
EPSS
Percentile
69.2%
Zfc-User is vulnerable to cross-site scripting (XSS) attacks. The library does not sanitize input strings in the user/login.phtml files, allowing a malicious user to inject and execute arbitrary script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zf-commons/zfc-user | le | 1.2.1 |
Related
friendsofphp
friendsofphp
XSS vulnerability in login redirect param
2015-01-08 14:18:45
XSS vulnerability in login redirect param
2015-01-08 14:18:45
cvelist
cvelist
CVE-2015-1039
2015-01-15 15:00:00
prion
prion
Cross site scripting
2015-01-15 15:59:00
nvd
nvd
CVE-2015-1039
2015-01-15 15:59:27
osv
osv
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect
2022-05-17 04:17:28
cve
cve
CVE-2015-1039
2015-01-15 15:59:27
github
github
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect
2022-05-17 04:17:28