CVEvulnerability
CVE-2014-2280
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the search feature in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Affected configurations
• seeddms seeddms (<= 4.2.2)
• seeddms seeddms 3.3.12
• seeddms seeddms 3.4.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-03/0101.html archives.neohapsis.com
- http://packetstormsecurity.com/files/125726 packetstormsecurity.com
- http://secunia.com/advisories/57475 Vendor Advisory
- http://sourceforge.net/p/seeddms/code/ci/master/tree/CHANGELOG sourceforge.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91830 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2014-03/0101.html archives.neohapsis.com
- http://packetstormsecurity.com/files/125726 packetstormsecurity.com
- http://secunia.com/advisories/57475 Vendor Advisory
- http://sourceforge.net/p/seeddms/code/ci/master/tree/CHANGELOG sourceforge.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91830 exchange.xforce.ibmcloud.com