CVE-2013-5744

{"id": "CVE-2013-5744", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-10-28T22:55:03.990", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2013-10/0031.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://www.htbridge.com/advisory/HTB23174", "tags": ["Exploit"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter."}, {"lang": "es", "value": "Vulnerabilidad de XSS en Feng Office 2.3.2-rc y anteriores versiones permite a atacantes remotos inyectar script arbitrario o HTML a trav\u00e9s de un par\u00e1metro ref_XXX arbitrario."}], "lastModified": "2013-10-29T21:04:26.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fengoffice:feng_office:*:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E031DFD-5572-45F0-806D-0668B9068310", "versionEndIncluding": "2.3.2"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2418465C-C63C-4F19-BB75-846E4B9068E8"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01778C8E-A97B-4FCC-9AF1-E90303F43FE1"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2344DA4D-3BB2-41F3-B69B-AA2993400F01"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E741D2A-1329-4265-81A4-1A0CA59E04EC"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D636D1AB-FEFF-4DEE-8735-0168A84FFD36"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49212305-B48D-492F-85A0-9DE502EBEE86"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B13199D-A732-4F18-93C3-9856C90EA817"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D38EC7A1-3FFC-4F48-9660-3CE48EDE1645"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9A50B5F-FB66-4DA7-8D94-B9198275F32E"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2BB59DF-FBD1-49B5-82D5-D63207F72F85"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AD19521-64BB-4CC8-9D0D-5E80E1E9F111"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D6BDBBD-4793-44CB-BBFC-DC64B719FFF9"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA5E28AA-93DB-4381-8AFF-AA59322AECC0"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DBBF6A4-1B7E-42FF-B1E8-ED5B9B96F914"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:1.7.5:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B8FEFF8-CE07-47BB-BA28-7530646D6DF4"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DECA643A-78C4-488B-B3BA-B022F8041883"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F23DF96E-3DF8-47F1-AE6A-95381F9C8A6A"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B05F5A1A-D69F-4E75-BC5E-BC920FD655BF"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CB62426-3B0D-4B33-98E3-CB3FA259FCB9"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56C0D9C4-E770-4853-AABF-7374C053BD25"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.0.0:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06C3FE47-D453-418B-8ABF-E5C7F3C59648"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79EBCC0F-0389-4FD5-998F-BF634D49DEE6"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9D6CE25-C96B-46F1-A0D3-14F2A2B3E9FC"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A07E12A0-CAE6-454A-8517-FA9D3A61E713"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.1.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11F3EB35-F68F-4018-BB07-3CF95E402F32"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6765CEC-9CF6-418F-B9AF-08ABB9227F17"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF6C987D-267B-492E-B2AE-CE912655FF98"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.0:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BF512AE-BCD0-42D0-82FA-41A79744F3AC"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "537E450A-3464-4B72-8757-E9FCCB38CE7F"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.1:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F206E728-E1A6-4396-9571-8E34E5C225EB"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33391493-FAE2-4936-8D39-11B9FD6185B1"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4178258-E097-4087-AD4B-5351F6A91ACF"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.3.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBA4551E-C1D6-46CA-8B2E-E0EDA866FD2B"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B148BD6-B15A-4AC1-BAA5-C8EB8115F728"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16B80786-726E-4F00-A302-D713F9F3D5CD"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2713B9E6-3357-4D6A-9523-A1CDD212E37E"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3458D6A1-2DD4-4C3A-9A3B-15EA4DE9AAB6"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7992D7EF-0F5D-482D-A22D-2A3D663387BC"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C84AA0A-ACC3-41FD-83A2-504B00B4CDAA"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "262F3298-EED7-4A09-883B-801756433D4C"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1487C37B-A9D1-4BF5-97DA-9CCBE3E49840"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2525E76-1008-4BB2-88EB-214C75DA3986"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1:rc:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DD84C1B-44D6-4DD2-95EB-E07AEA0492AB"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DF23A8-6D34-43D1-BB53-D404E291A89F"}, {"criteria": "cpe:2.3:a:fengoffice:feng_office:2.3.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D78A5A94-EBD6-4677-8319-E747CFBD1572"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}