CVE-2014-1877

MEDIUM 4.3CVE-2014-1877 · Published 13/03/2014 · updated 17/06/2026

In short

CVE-2014-1877 is a MEDIUM (CVSS 4.3) vulnerability affecting dokeos (dokeos project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dokeos dokeos_project	`= 2.1.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone, (2) Street, (3) Address line, (4) Zip code, or (5) City field to main/auth/profile.php; (6) Subject field to main/social/groups.php; or (7) Message body field to main/messages/view_message.php.

References

seclists.org/oss-sec/2014/q1/258 · Exploit
seclists.org/oss-sec/2014/q1/286
securityfocus.com/bid/65416
xchg.info · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/91295

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free