CVEvulnerability
CVE-2014-1877
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone, (2) Street, (3) Address line, (4) Zip code, or (5) City field to main/auth/profile.php; (6) Subject field to main/social/groups.php; or (7) Message body field to main/messages/view_message.php.
Affected configurations
• dokeos project dokeos 2.1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/oss-sec/2014/q1/258 Exploit
- http://seclists.org/oss-sec/2014/q1/286 seclists.org
- http://www.securityfocus.com/bid/65416 www.securityfocus.com
- http://www.xchg.info/?p=381 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91295 exchange.xforce.ibmcloud.com
- http://seclists.org/oss-sec/2014/q1/258 Exploit
- http://seclists.org/oss-sec/2014/q1/286 seclists.org
- http://www.securityfocus.com/bid/65416 www.securityfocus.com
- http://www.xchg.info/?p=381 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91295 exchange.xforce.ibmcloud.com