CVEvulnerability
CVE-2014-5113
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the (1) testtype, (2) ver, (3) cm, (4) map, (5) lines, (6) pps, (7) bpp, (8) codec, (9) provtext, (10) provtextextra, (11) provlink, or (12) duration parameter.
Affected configurations
• visualware myconnection server 9.7i
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/127545/MyConnection-Server-MCS-9.7i-Cross-Site-Scripting.html Exploit
- http://treadstonesecurity.blogspot.ca/2014/07/myconnection-server-mcs-reflective-xss.html Exploit
- http://www.securityfocus.com/bid/68793 Exploit
- http://packetstormsecurity.com/files/127545/MyConnection-Server-MCS-9.7i-Cross-Site-Scripting.html Exploit
- http://treadstonesecurity.blogspot.ca/2014/07/myconnection-server-mcs-reflective-xss.html Exploit
- http://www.securityfocus.com/bid/68793 Exploit