Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-9367
HistoryDec 31, 2014 - 9:00 p.m.

CVE-2014-9367

2014-12-3121:00:00
mitre
www.cve.org
5

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

69.9%

JSON

Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a “'” (single quote) in the scope parameter to do/view/TWiki/WebSearch.

Related

nvd 1
packetstorm 1
securityvulns 2
prion 1
cve 1
openvas 1
nvd
nvd
CVE-2014-9367
2014-12-31 21:59:04
packetstorm
packetstorm
TWiki 6.0.0 / 6.0.1 WebSearch Cross Site Scripting
2014-12-19 00:00:00
securityvulns
securityvulns
TWiki Security Advisory - XSS Vulnerability - CVE-2014-9367
2014-12-22 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-12-22 00:00:00
prion
prion
Cross site scripting
2014-12-31 21:59:00
cve
cve
CVE-2014-9367
2014-12-31 21:59:04
openvas
openvas
TWiki 'scope' Parameter Cross-Site Scripting Vulnerability
2015-01-06 00:00:00

AI Score

5.7

Confidence

High

EPSS

0.003

Percentile

69.9%

JSON
Related for CVELIST:CVE-2014-9367
nvd1packetstorm1securityvulns2prion1cve1openvas1