Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
355
VMScore
CVE-2017-14717
Published: 22/09/2017 Updated: 06/10/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Vulnerability Summary
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
Subscribe to Epesi
Vulnerable Product
Search on Vulmon
Subscribe to Product
telaxius epesi
Exploits
Exploit DB: EPESI 1.8.2 rev20170830 - Cross-Site Scripting
# Exploit Title: Multiple Stored XSS in EPESI # Date: 10/03/2017 # Exploit Author: Zeeshan Shaikh # Vendor Homepage: epesi/ # Software Link: epesi/download/ # Version: 182 rev20170830 # CVE : CVE-2017-14712 to CVE-2017-14717 # Category: webapps XSS 1 (Tasks - Title) Steps to recreate: 1 Home->Tasks->add new 2 Enter title ...
Exploit DB: EPESI 1.8.2 Revision 20170830 Cross Site Scripting
EPESI version 182 revision 20170830 suffers from a cross site scripting vulnerability ...
References
CWE-79
https://forum.epesibim.com/d/4956-security-issue-multiple-stored-xss-in-epesi-version-1-8-2-rev20170830
https://www.exploit-db.com/exploits/42950/
https://nvd.nist.gov
https://www.exploit-db.com/exploits/42950/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started