Lucene search

[email protected]CVE-2013-7188

HistoryDec 20, 2013 - 11:55 p.m.

CVE-2013-7188

2013-12-2023:55:18

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-7188

cross-site scripting

xss

kbkp software

hostbill

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

hostbillapphostbillRange≤13-12-2013

hostbillapphostbillMatch02-08-2013

hostbillapphostbillMatch04-11-2013

hostbillapphostbillMatch4.7.0

hostbillapphostbillMatch4.7.2

hostbillapphostbillMatch4.7.4

hostbillapphostbillMatch4.7.6

hostbillapphostbillMatch4.7.8

hostbillapphostbillMatch4.8.0

hostbillapphostbillMatch4.8.2

hostbillapphostbillMatch4.8.4

hostbillapphostbillMatch4.8.6

hostbillapphostbillMatch4.8.8

hostbillapphostbillMatch4.9.0

hostbillapphostbillMatch4.9.6

hostbillapphostbillMatch4.9.8

hostbillapphostbillMatch06-11-2013

hostbillapphostbillMatch06-12-2013

hostbillapphostbillMatch08-11-2013

hostbillapphostbillMatch15-11-2013

hostbillapphostbillMatch18-10-2013

hostbillapphostbillMatch19-11-2013

hostbillapphostbillMatch22-11-2013

hostbillapphostbillMatch25-10-2013

hostbillapphostbillMatch29-11-2013

CPENameOperatorVersion
hostbillapp:hostbillhostbillapp hostbillle13-12-2013
hostbillapp:hostbillhostbillapp hostbilleq02-08-2013
hostbillapp:hostbillhostbillapp hostbilleq04-11-2013
hostbillapp:hostbillhostbillapp hostbilleq4.7.0
hostbillapp:hostbillhostbillapp hostbilleq4.7.2
hostbillapp:hostbillhostbillapp hostbilleq4.7.4
hostbillapp:hostbillhostbillapp hostbilleq4.7.6
hostbillapp:hostbillhostbillapp hostbilleq4.7.8
hostbillapp:hostbillhostbillapp hostbilleq4.8.0
hostbillapp:hostbillhostbillapp hostbilleq4.8.2

CPE	Name	Operator	Version
hostbillapp:hostbill	hostbillapp hostbill	le	13-12-2013
hostbillapp:hostbill	hostbillapp hostbill	eq	02-08-2013
hostbillapp:hostbill	hostbillapp hostbill	eq	04-11-2013
hostbillapp:hostbill	hostbillapp hostbill	eq	4.7.0
hostbillapp:hostbill	hostbillapp hostbill	eq	4.7.2
hostbillapp:hostbill	hostbillapp hostbill	eq	4.7.4
hostbillapp:hostbill	hostbillapp hostbill	eq	4.7.6
hostbillapp:hostbill	hostbillapp hostbill	eq	4.7.8
hostbillapp:hostbill	hostbillapp hostbill	eq	4.8.0
hostbillapp:hostbill	hostbillapp hostbill	eq	4.8.2

Rows per page:

1-10 of 251

References

extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/

hostbillapp.com/changelog

osvdb.org/101030

secunia.com/advisories/56124

blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099

exchange.xforce.ibmcloud.com/vulnerabilities/89750

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for CVE-2013-7188

nvd1 cvelist1 prion1