Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
5.4
CVSSv3
CVE-2017-14717
Published: 22/09/2017 Updated: 06/10/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Vulnerability Summary
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
Subscribe to Telaxius
Vulnerable Product
Search on Vulmon
Subscribe to Product
telaxius epesi
Exploits
Exploit DB: EPESI 1.8.2 rev20170830 - Cross-Site Scripting
# Exploit Title: Multiple Stored XSS in EPESI # Date: 10/03/2017 # Exploit Author: Zeeshan Shaikh # Vendor Homepage: epesi/ # Software Link: epesi/download/ # Version: 182 rev20170830 # CVE : CVE-2017-14712 to CVE-2017-14717 # Category: webapps XSS 1 (Tasks - Title) Steps to recreate: 1 Home->Tasks->add new 2 Enter title ...
Exploit DB: EPESI 1.8.2 Revision 20170830 Cross Site Scripting
EPESI version 182 revision 20170830 suffers from a cross site scripting vulnerability ...
References
CWE-79
https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
https://www.exploit-db.com/exploits/42950/
https://nvd.nist.gov
https://www.exploit-db.com/exploits/42950/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started