4.3
CVSSv2

CVE-2013-5744

Published: 28/10/2013 Updated: 29/10/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and previous versions allows remote malicious users to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

fengoffice feng office 2.3.1

fengoffice feng office 2.3

fengoffice feng office 2.1.0

fengoffice feng office 1.7.1

fengoffice feng office 1.7

fengoffice feng office 2.2.3.1

fengoffice feng office 2.2.2

fengoffice feng office 2.2.1

fengoffice feng office 2.0.0

fengoffice feng office 1.7.5

fengoffice feng office 2.3.2

fengoffice feng office 2.2.4.1

fengoffice feng office 2.2.4

fengoffice feng office 2.2.0

fengoffice feng office 1.7.4

fengoffice feng office 1.7.2

fengoffice feng office

fengoffice feng office 2.3.1.1

fengoffice feng office 1.7.3.1

fengoffice feng office 1.6.2

Exploits

Feng Office version 232-rc suffers from a cross site scripting vulnerability ...