CVE-2016-6133 | BDVDB-2026-88097 Detail

Description#

Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to WorkArea/SelectUserGroup.aspx.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/540742/100/0/threaded

Exploit#

No public exploit known

History#

Version 12017-07-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.