CVE-2014-8469 Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrary web script or HTML via the User-Agent header.
MediumCVSS 4.3
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrary web script or HTML via the User-Agent header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxi9 phpfox | <= 3.7.6 | No fix listed |
References
- packetstormsecurity.com exploit
- 20141118 PHPFox XSS AdminCP mailing-list
- 35274 exploit
- 71180 vdb-entry
- phpfox-cve20148469-xss(98727) vdb-entry