Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2013-4295

Published: 24/10/2013 Updated: 24/10/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Shindig

Vulnerability Summary

The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote malicious users to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vulnerable Product Search on Vulmon Subscribe to Product

apache shindig 2.5.0

Exploits

Exploit DB: Apache Shindig - XML External Entity Information Disclosure
source: wwwsecurityfocuscom/bid/63260/info Apache Shindig is prone to an information-disclosure vulnerability An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks Apache Shindig 250 is vulnerable <?xml version="10" encoding="UTF-8"?> <!DOCTYPE Module [ <!ENTITY ...
Exploit DB: Apache Shindig 2.5.0 XXE Injection
Apache Shindig PHP version 250 suffers from an XXE injection vulnerability ...

References

CWE-200http://archives.neohapsis.com/archives/bugtraq/2013-10/0104.htmlhttp://www.securityfocus.com/bid/63260http://shindig.apache.org/security.htmlhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/38813/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook