CVE-2014-2710 Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login pag...
MediumCVSS 6.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login page (index.php) or (2) login form (loginform-inc.php).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oliver project oliver | <= 1.3.1 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160420 Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1 exploit mailing-list third-party-advisory vdb-entry
- 20160419 Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1 mailing-list