CVE-2013-1466

Multiple cross-site scripting (XSS) vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the (1) subject parameter to profiles.php; (2) address1, (3) address2, (4) calendar_type, (5) city, (6) state, (7) title, (8) url, or (9) zipcode parameter to calendar/index.php; (10) title or (11) url parameter to links/index.php; or (12) PATH_INFO to admin/plugins/mediagallery/xppubwiz.php/.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:glfusion:glfusion:*:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.4.pl4:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.5.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.5.pl2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.5.pl3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.6.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.6.pl2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.6.pl3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.6.pl4:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.7:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl4:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl5:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.1.8.pl6:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl3:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl4:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl5:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl6:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.0.pl7:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.2.pl1:*:*:*:*:*:*:*
cpe:2.3:a:glfusion:glfusion:1.2.2.pl2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-02-05 15:10

Updated : 2024-02-04 18:35


NVD link : CVE-2013-1466

Mitre link : CVE-2013-1466

CVE.ORG link : CVE-2013-1466


JSON object : View

Products Affected

glfusion

  • glfusion
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')