CVE-2014-8069

MEDIUM · 4.3 CVSS Gepubliceerd: 14-10-2014 CWE-79

Beschrijving NL

Meerdere cross-site scripting (XSS) kwetsbaarheden in YOOtheme Pagekit CMS 0.8.7 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) HTTP Referer-header naar index.php/user of (2) PATH_INFO naar index.php.

Origineel (Engels) tonen

Multiple cross-site scripting (XSS) vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP Referer header to index.php/user or (2) PATH_INFO to index.php.

Vendors

Yootheme

Affected products

Pagekit

References

packetstormsecurity.com