按月存檔:二月 2014

CVE-2014-7291 Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability

Math Fascinated

CVE-2014-7291  Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability

Fast binary output

Exploit Title: Springshare LibCal Multiple XSS (Cross-Site Scripting) Vulnerability

Product: LibCal

Vendor: Springshare

Vulnerable Versions: 2.0

Tested Version: 2.0

Advisory Publication: Nov 25, 2014

Latest Update: Nov 25, 2014

Vulnerability Type: Cross-Site Scripting [CWE-79]

CVE Reference: CVE-2014-7291

CVSS v2 Base Score: 4.3 (MEDIUM) (AV:N/AC:M/Au:N/C:N/I:P/A:N) (legend)

Impact Subscore: 2.9

Exploitability Subscore: 8.6

Solution Status: Fixed by Vendor

Credit: Wang Jing [SPMS, Nanyang Technological University (NTU), Singapore]

https://cxsecurity.com/issue/WLB-2014120002

View original post