Lucene search

MitreCVELIST:CVE-2013-5312

HistoryAug 19, 2013 - 8:00 p.m.

CVE-2013-5312

2013-08-1920:00:00

mitre

www.cve.org

cross-site scripting

remote attackers

arbitrary web script

html

parameter injection

browse videos

groups page

AI Score

5.8

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to browse_videos.php or the (2) cat parameter to groups.php.

References

osvdb.org/96226

osvdb.org/show/osvdb/96225

packetstormsecurity.com/files/122746/PHP-VID-XSS-SQL-Injection-CRLF-Injection.html

www.exploit-db.com/exploits/27519

www.securityfocus.com/bid/61734