CVE-2011-1714

EPSS 2.6%

Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencewww.exploit-db.com/exploits/17127não verificado exploitdbwww.exploit-db.com/exploits/17127não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://blog.eyeos.org/en/2011/04/07/about-some-eyeos-security-issues/http://osvdb.org/71718 http://osvdb.org/71720 http://secunia.com/advisories/43818 http://secunia.com/advisories/43997 https://exchange.xforce.ibmcloud.com/vulnerabilities/66574 http://www.autosectools.com/Advisories/eyeOS.2.3_Reflected.Cross-site.Scripting_172.html http://www.exploit-db.com/exploits/17127 http://www.securityfocus.com/bid/47184