Lucene search
HistoryNov 13, 2013 - 3:55 p.m.
CVE-2013-6780
cve-2013-6780
cross-site scripting
xss vulnerability
yahoo! yui
uploader component
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
65.0%
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.
Affected configurations
Node
yahooyuiMatch2.5.0
ORyahooyuiMatch2.5.1
ORyahooyuiMatch2.5.2
ORyahooyuiMatch2.6.0
ORyahooyuiMatch2.7.0
ORyahooyuiMatch2.8.0
ORyahooyuiMatch2.8.1
ORyahooyuiMatch2.8.2
ORyahooyuiMatch2.9.0
Related
ubuntucve
ubuntucve
CVE-2013-6780
2013-11-13 00:00:00
packetstorm
packetstorm
Cisco Ironport AsyncOS Cross Site Scripting
2015-02-25 00:00:00
prion
prion
Cross site scripting
2013-11-13 15:55:00
nvd
nvd
CVE-2013-6780
2013-11-13 15:55:04
cvelist
cvelist
CVE-2013-6780
2013-11-13 15:00:00
nessus
nessus
Fedora 20 : moodle-2.5.3-1.fc20 (2013-21312)
2013-11-25 00:00:00
Fedora 19 : moodle-2.4.7-1.fc19 (2013-21397)
2013-11-25 00:00:00
Fedora 18 : moodle-2.3.10-1.fc18 (2013-21354)
2013-11-25 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.3-1.fc20
2013-11-24 03:29:31
[SECURITY] Fedora 18 Update: moodle-2.3.10-1.fc18
2013-11-23 19:35:25
[SECURITY] Fedora 19 Update: moodle-2.4.7-1.fc19
2013-11-23 19:49:20
openvas
openvas
Fedora Update for moodle FEDORA-2013-21354
2013-11-26 00:00:00
Fedora Update for moodle FEDORA-2013-21397
2013-11-26 00:00:00
Fedora Update for moodle FEDORA-2013-21397
2013-11-26 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
65.0%
Related for CVE-2013-6780