CVE-2013-7188

{"id": "CVE-2013-7188", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2013-12-20T23:55:18.963", "references": [{"url": "http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/", "source": "cve@mitre.org"}, {"url": "http://hostbillapp.com/changelog", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/101030", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/56124", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89750", "source": "cve@mitre.org"}, {"url": "http://extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://hostbillapp.com/changelog", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/101030", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/56124", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89750", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad corss-site scripting (XSS) en KBKP Software Hostbill anteriores a 2013-12-14 permite a atacantes remotos inyectar script web o HTML de forma arbitraria a trav\u00e9s de vectores no especificados."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hostbillapp:hostbill:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A103A21-A1BC-4576-AED4-6C5AF3A16908", "versionEndIncluding": "13-12-2013"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:02-08-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8D36534-5D58-428F-84DF-F6D04FACC466"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:04-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8523E3D4-AEA8-48B1-A803-BFA4E8521661"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8726F2AB-A981-45F5-8652-9DE160D6D287"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5404D8-E2C1-4CB8-B0E5-0378E181C55F"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F877F8B-089D-44C2-AA33-FE1C262BE829"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D327A52-1B81-4B84-8426-24DFC6565A62"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "358095FE-D258-44AF-97DF-B5DF0DC3FD65"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A62EB14-66E7-4E57-A7DB-08E6D20AA5E7"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9299A3FE-1863-4901-9C66-4E55AC41AD55"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4DBD775-3246-40F3-A2E5-8B80260FB787"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CDE2CED-9926-4223-B511-FFDAA11F1F4E"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B20CFD6D-E432-4830-8E0D-E52E1DCCF5BC"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AE0464E-A952-4007-BAB9-28512D300C74"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8A53DD5-63C4-4383-ACFB-1FD18FC64620"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:4.9.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6082732B-E017-45F6-8B39-CED62D5C6156"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:06-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88A79F09-A5F2-4F02-8495-EFB6A6DEC6F4"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:06-12-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17698694-D32F-4C2C-A075-1756867383F1"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:08-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5AF3BBC-DB0C-430B-9280-2EA6980B5D16"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:15-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE0F11A7-63B8-456F-822A-7B29F40D096C"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:18-10-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB7FD83B-860F-4A35-B2D4-F8863A799F8C"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:19-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D98B74C-BA50-41DF-A04A-888F1A090AAA"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:22-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21AA115C-90DC-4B3A-84B5-ADD8C37CC4F9"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:25-10-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1296BCE4-D0D6-4C33-B4DA-C19E9F3160B1"}, {"criteria": "cpe:2.3:a:hostbillapp:hostbill:29-11-2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E2E4B57-F379-408A-89BB-9D01623D28C5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}