CVEvulnerability
CVE-2013-5939
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list or (2) introduce parameter to index.php.
Affected configurations
• phpcms guesbook module
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/98886 osvdb.org
- http://packetstormsecurity.com/files/123746/PHPCMS-Guestbook-Cross-Site-Scripting.html Exploit
- http://seclists.org/fulldisclosure/2013/Oct/187 Exploit
- http://osvdb.org/98886 osvdb.org
- http://packetstormsecurity.com/files/123746/PHPCMS-Guestbook-Cross-Site-Scripting.html Exploit
- http://seclists.org/fulldisclosure/2013/Oct/187 Exploit