PoC Index

CVE-2014-6070

MEDIUM 4.3EPSS 3.6%

Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1) index.php or (2) detail.php.

CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
3.58% chance of exploitation in the next 30 days, 89th percentile
Published
2014-09-11
Updated
2024-08-06

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related