CVE-2013-7194

Description

Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Last name, (2) Lesson name, or (3) Course name field.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://packetstormsecurity.com/files/124400
• http://www.exploit-db.com/exploits/30213
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89660
• http://packetstormsecurity.com/files/124400
• http://www.exploit-db.com/exploits/30213
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89660

CWEs

CWE-79