CVE-2014-9580 | BDVDB-2026-67192 Detail

Description#

Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary web script or HTML via the Description field in a file upload. NOTE: this issue was originally incorrectly mapped to CVE-2014-1155; see CVE-2014-1155 for more information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/35582
http://packetstormsecurity.com/files/129666
https://exchange.xforce.ibmcloud.com/vulnerabilities/99550

Exploit#

http://www.exploit-db.com/exploits/35582

History#

Version 12015-01-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.