CVE-2013-7194 | BDVDB-2026-59045 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Last name, (2) Lesson name, or (3) Course name field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/30213
http://packetstormsecurity.com/files/124400
https://exchange.xforce.ibmcloud.com/vulnerabilities/89660

Exploit#

http://www.exploit-db.com/exploits/30213

History#

Version 12013-12-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.