CVE-2013-7194

Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) Last name, (2) Lesson name, or (3) Course name field.

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

2.64% chance of exploitation in the next 30 days, 84th percentile

Published

2013-12-21

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/30213

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30213

References

• CVE Record
• NVD entry

Related

• CVE-2013-7193
• CVE-2013-7196
• CVE-2013-7192
• CVE-2013-7204
• CVE-2013-7190
• CVE-2013-7209