CVE-2014-1403

概要

参考情報

• blog.kotowicz.net/2014/01/xssing-with-shakespeare-name-calling.html · Exploit
• osvdb.org/102803
• seclists.org/fulldisclosure/2014/Feb/5 · Exploit
• secunia.com/advisories/56634 · Vendor Advisory
• securityfocus.com/bid/65291
• exchange.xforce.ibmcloud.com/vulnerabilities/90876
• oyvindkinsey/easyXDM commit a3194d3 · Exploit
• oyvindkinsey/easyXDM release 2.4.19 · Patch

easyxdm のその他の脆弱性

• CVE-2023-27739中 6.1easyXDM 2.5 allows XSS via the xdm_e parameter.
• CVE-2013-5212中 6.1Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file.