2.6
CVSSv2

CVE-2014-1826

Published: 26/03/2014 Updated: 26/03/2014
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote malicious users to inject arbitrary web script or HTML via a crafted map name.

Vulnerable Product Search on Vulmon Subscribe to Product

ithoughts ithoughtshd 4.19

Exploits

iThoughtsHD version 419 suffers from cross site scripting, denial of service, and null byte injection file upload vulnerabilities ...