CVE-2013-2637

EPSS 4.2%

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/24922unverified exploitdbwww.exploit-db.com/exploits/24922unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-updates/2013-08/msg00027.html https://exchange.xforce.ibmcloud.com/vulnerabilities/83288 http://www.exploit-db.com/exploits/24922 http://www.securityfocus.com/bid/58930