CVEvulnerability
CVE-2014-9405
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.
Affected configurations
• free freebox os 3.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jun/1 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/535660/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/74936 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jun/1 Exploit, Mailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/535660/100/0/threaded Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/74936 Third Party Advisory, VDB Entry